Microsoft Systems Management Server (SMS) 2003 Service Pack 2 (SP2) is primarily a rollup of a number of fixes for SMS 2003, but also introduces some changes to the supported configurations and broadens the configurations allowed. SMS 2003 SP2 also includes incremental improvements to usability, security, and performance.

Important: If you are planning to install the Inventory Tool for Microsoft Updates after you have upgraded your site to SMS 2003 SP2, then you must use the version that is designed for SP2. That version is included with SP2, but not installed by default. You can also download it separately from the link below.

Posted by: kurtsh | June 23, 2006

RELEASE: Windows Vista Step-by-Step Guides

These step-by-step guides will assist IT Professionals in deploying or migrating to Windows Vista. These guides will also provide step-by-step information on how to control device installation using Device Management and Installation (DMI) and manage ADMX files. There are also step-by-step guides to help you protect data using BitLocker Drive Encryption, to administer the TPM Security Hardware in a computer using Trusted Platform Module (TPM) Services, and to help deploy better-managed desktops and mitigate the impact of malware using User Account Control (UAC).

  • Deploying Vista Step by Step Guide.doc
  • Managing Group Policy ADMX Files Step by Step Guide.doc
  • Performance Monitoring and Tuning Step by Step Guide.doc
  • Print Management Step by Step Guide.doc
  • Step by Step Guide to Controlling Device Installation with Group Policy.doc
  • Step by Step Guide to Device Driver Signing and Staging.doc
  • User Account Control Step by Step Guide.doc
  • Windows Vista Beta 2 BitLocker Drive Encryption Step-by-Step Guide (May 2006).doc
  • Windows Vista Beta 2 Migration Step by Step Guide.doc
  • Windows Vista Beta 2 Trusted Platform Module Services Step by Step Guide (May 2006).doc
  • Windows Vista Beta 2 Windows Collaboration Step by Step Guide.doc
  • Windows Vista Beta 2 Windows Shared View Step by Step.doc
  • Windows Vista Mobile Device Center Step by Step.doc
  • Windows Vista Speech Recognition Step by Step.doc
Imagine Excel spreadsheet analysis taking advantage of a cluster of distributed Windows computers to compute large exhaustive jobs.
 
Commodity supercomputing for desktop users.  That’s exactly what was demonstrated at Securities Industry Association (the largest single IT event for financial securities industry) the other day.  And it’s being done using hardware & software that Enterprise’s already have today.
 
  • Excel 2007 provides a front-end for working with traditional spreadsheets.
  • Excel Services is a component of Sharepoint Server 2007 & provides the organizational engine and middle tier to interact with the compute cluster and provide negotiation for the initial dataset, while also centralizing and maintaining security compliance for the data held in the spreadsheets, mitigating the traditional risks of "spreadsheet creep.
  • Windows Server 2003 Compute Cluster Edition is a version of our server operating system provides the technology necessary to combine the computational horsepower of massive numbers of CPUs by the distribution and management of discrete compute jobs.
 
I’ve sent this out before, but I suppose it can’t hurt to send it out again:
 
If you are interested in registering for the beta version of Microsoft Client Protection, please visit the Forefront Client Security site at http://www.microsoft.com/forefront/clientsecurity/default.mspx.
 
"Microsoft Client Protection" provides:
– Antivirus
– Antispyware
– Malicious Software Removal (a special tool that extracts ‘hard-to-remove’ virii & spyware from a machine)
– Bi-directional firewall
…with unified management of all 4 components through a central administrative mechanism.
Posted by: kurtsh | June 21, 2006

VIDEOS: “What is Softricity SoftGRID?”

Here are 3 videos/presentations that should help folks understand what it is the Softricity SoftGRID is such a major acquisition for Microsoft.  Personally, I think this is one of the smartest acquisitions we’ve made in YEARS… yep.  That’s how important and relevant SoftGRID & Application Virtualization is:

 

Microsoft Management Summit 2006 Demonstration
See Softricity demonstrated and explained on the floor at MMS2006.

http://msdn.microsoft.com/isv/isvconnect/bestinshow/mms2006/softricity300.asx

——————
SoftGrid for Microsoft SMS

With SoftGrid for Microsoft Systems Management Server (SMS), IT administrators get all the benefits of the SoftGrid Platform – including application virtualization, on-demand streaming and self-provisioning – from within the SMS infrastructure.

The combination of SMS and SoftGrid allows customers the flexibility to choose the best way to deploy and run applications while maintaining OS level patches, updates, inventory, asset tracking and much more from a single, integrated management point.

http://www.softricity.com/products/softgrid-sms.asp

——————
Exclusive Presentation on the Impacts of Application Virtualization and Streaming
Brian Gammage, Gartner Research Vice President
Recorded 2/22/2006

Virtualization is widely regarded as the most important technology to hit the enterprise in decades. The potential benefits for the desktop are tremendous, with improvements in the manageability, security and flexibility of personal computing. By reducing complexity, virtualization promises to streamline support, accelerate deployments and reduce the cost of personal computing. But virtualization is occurring at more than one level; decoupling hardware, operating systems and applications. So, what are these different levels of virtualization technology and how are they being used by companies today? How mature is the technology? How does application virtualization differ from machine virtualization and what role does streaming technology play?

Join featured Gartner Research Vice President, Brian Gammage, a recognized expert in desktop virtualization, to learn what application virtualization and streaming really are, and how they can impact your approach to managing user access to enterprise applications.

Formal link:  http://www.softricity.com/news/webinar-archive.asp?eventID=gartner20060222
Direct link:  https://www115.livemeeting.com/cc/softricity/view?id=47M6C3&pw=j]},~8d|N’

Posted by: kurtsh | June 21, 2006

TRAINING: ISA 2006 Beta Virtual Labs

Test-drive the new hosted virtual labs and learn how to configure ISA 2006 to publish Exchange and SharePoint for remote access, leverage HTTP compression to reduce bandwidth consumption and provide better resiliency against flood attacks.
 
 
Attend a TechNet Virtual Lab and submit an evaluation between now and June 30, 2006 and you could win a Pocket PC! See official rules for more details. (http://www.microsoft.com/events/officialrules_ppc.mspx) Offer open to residents of the U.S. and Canada only.
Don’t know where to start re: Gramm-Leach or SOX compliance?  Never fear… we’ve got a guide to get you started.  This is a fantastic overview of regulatory compliance considerations that you know that you’re eventually going to have to comply by anyway… so take a look at it and prepare yourself before management comes in and asks you about it.
———————
The Regulatory Compliance Planning Guide is intended to help IT professionals and others understand steps that can be taken to help address regulatory mandates. The Planning Guide:
  • Shows IT professionals how they can use an IT controls framework to help address IT compliance requirements.
  • Includes a mapping of several significant regulations and standards, including the Sarbanes-Oxley Act (SOX), Gramm-Leach-Bliley Act (GLBA), and Health Insurance Portability and Accountability Act (HIPAA) to a sample control framework.
  • Directs customers to Microsoft resources that can help them address their compliance requirements.

DOWNLOAD: 
http://www.microsoft.com/downloads/details.aspx?FamilyID=bd930882-0d39-4900-9a79-b91f213ed15d&DisplayLang=en

Posted by: kurtsh | June 20, 2006

COMMENTARY: Microsoft’s ACTUAL Top 10 “flops”

Recently, a link-pandering hack decided to accent Bill Gates’ announcement to transition to a part-time role at Microsoft by listing on the web what she opines are Microsoft’s worst products, beating on old horses like Microsoft Bob & Windows ME. 
 
Y’know, as strange as this sounds, I actually don’t consider Microsoft Bob to be a "catastrophic flop".  I would define a major flop as being a balance of significant resource investment, substantial marketing hype, and negative impact upon customers.  The larger the hype or the larger the investment or the more poor the impact, the more significant the flop.  Bob was in all cases, relatively harmless:  It wasn’t very costly relative to other work going on at the time like NT 4.0, it didn’t receive a tremendous amount of marketing unlike Win95, and it really didn’t impact users much – it was a UI substitute for $39.95.  It’s simply one of the more visible and memorable mistakes we’ve had so people kick it.  (Did you know it still works fine on WinXP systems?) 
 
The aforementioned hack’s list was a good demonstration of her actual ignorance of Microsoft’s history.  In an effort to show just how far off she was, here’s a list of products that I instead would categorize as being Microsoft’s Top 10 Greatest Flops. 
Microsoft’s Top 10 Flops
 
Vizact 2000
Microsoft Vizact?  Never heard of it?  It was a fully launched Office 2000 product that shared billing along side the rest of the Y2K product, just like Microsoft’s well-built but ill-fated PhotoDraw 2000. Vizact was a tool that "animated" documents and made them "interactive" by rendering the entire document in HTML and making sections collapsible using crosshairs, and making areas multidimensional to allow greater informational depth without scrolling down the page.  the only problem was that no one ever asked for this in static Office documents:  Having this in web documents was just fine for most, but within static docs lile .XLSs?  Oh no.  Vizact lasted no more than 6-9 months before disappearing.  Today some of it’s seeds still reside within the HTML creation engine of Word.
…Office level hype & marketing, absolutely no consumer uptake… that’s what I call a flop.
Windows QoS
Windows Quality of Service (QoS) was technology between desktop & server to provide the world with the first managed end-point-to-router-to-end-point bandwidth controls that were isolated to individual user accounts and subnets.  IT could ensure that "Bill Gates and his Comdex demonstration" would get 90% of the available bandwidth on a given pipe while "Joe User who was on the same pipe, reading Hotmail" would get only 10%, as a policy.  But because Microsoft ran into the brick wall known as Cisco, who isn’t fond of sharing control over their territory any more than MS is of sharing theirs, nothing ever came of the server & client technology that was to make this possible.  It’s all still there though:  Waiting for someone to use it someday. …to date, I’ve never once met an organization that used it since it’s inception in 2000 and it’s constantly maintained in the OS, and that’s what I call a flop.
 
Microsoft Reader
Microsoft Reader was a VERY good framework for building eBooks & documents that a) were strongly digital rights protected, b) were not copy-and-pastable/printable, c) portable to multiple devices in a managed way, d) easily creatable using free or low-cost software like Microsoft Word, & e) very readable on LCD screens for a book-like experience, with bookmarks, highlighting, and inline user comments.  In a phrase, it was superior in every respect to Adobe Acrobat eBooks.  This however was a case of very bad product marketing & planning.  Instead of actively marketing interesting & relevant books to lure in potential influential end users, (like the Da Vinci Code, Microsoft Reference books, Zagat Guide, Double Digit Growth, etc.) the folks responsible for Reader chose to exclusively focus their efforts on eBook vendors like Amazon.com & Barnes & Noble, hoping that these folks would make the eBook revolution successful basically out of the goodness of their own hearts.  Needless to say, even with the availability of tools that enabled any Word document to be turned into a Reader eBook, it failed and today, Reader still exists and lives on as a great eBook platform but nonetheless, an fairly unused one.
…when you fail when you’ve got the world’s two largest book vendors behind you, you’ve got yourself a flop.
 
Mobile Information Server
Mobile Information Server 2001 was the brainchild of Mobility VP Juha Christensen, a Nokia executive that came onboard Microsoft and implemented a cellular Mobility strategy that was, at best, myopic.  MIS2001  provided WML-based mobile browser compatible web pages for WAP connections (particularly Exchange information) to cell phones with Phone.com’s browser.  (99% text content)  This might have been interesting in Europe where Juha was from, but in the US, almost no one uses WAP/WML.  MIS was eventually dismantled, its components fused into Exchange Server as a value add that we today call the "Exchange front end server", and the Exchange group has taken over it’s development.
…the mere fact that there are 50 Million cell phone users out there an virtually none of their corporate companies bought MIS spells "FLOP".
 
Rare/Grabbed by the Ghoulies/Kameo/Perfect Dark Zero
This one hurts because I love these guys but…  Rare, a game development studio acquisition, was a serious flop for Microsoft.  Producing games such as XBoxClassic "Grabbed by the Ghoulies", Xbox360 "Perfect Dark Zero", & Xbox360 "Kameo", Rare has done little to date to warrant the acquisition costs paid for them.  The lone bright spot in the acquistion was "Conker:  Live & Reloaded", a moderately heralded rated-R console game for XBoxClassic.  It looked good and had great game play but was rather light on the revenue otherwise.
…when you can’t bring in enough revenue to pay for your own acquisition, that’s a flop. 
 
Taxsaver
Microsoft Taxsaver was Microsoft’s answer to Intuit’s TurboTax.  It was a VERY nice piece of software that in most every respect, was superior to TurboTax at the time it was created but it has one seriously horrendous flaw:  It lacked state tax filing.  Yep – it was exclusively Federal tax only.  Why we couldn’t get this done or felt it was "optional", we’ll never know.  Suffice it to say that the product flopped but was sold to H&R Block who has since then added State Income Tax filing and is the #2 player in this market.  Meanwhile, the aforementioned hack journalist mentioned Microsoft Money as being a flop instead of Taxsaver:  Why would anyone mention Microsoft Money – a profitable & successful, highly acclaimed, and fairly beloved product amongst its users, when she could have mentioned Taxsaver?
…anyone that thinks the creation of a Federal only tax product is knowingly creating a flop.
 
Systems Management Server 2.0
As any truly experienced IT professional will tell you, the flagship management product from Microsoft’s Management group from back in 1998 was so buggy, non-functional, and poorly written – even through it’s Service Pack 2, the division almost never recovered.  Fortunately for us, it did get stabilized after the hiring of Kirill Tatarinov, former CEO of BMC Software, was brought in to lead the division and create a vision for Microsoft Enterprise Management.  SMS 2003’s stability, strong ties to the Dynamic Systems Initiative, and the introduction of OS Deployment, Device Management, and other functional SMS additions are a testament to the intellect and drive of Kirill… one of the reason’s his name is held in such reverence amongst Management specialists.
…I hope I don’t have to explain why a 5 year old product that people were still trying to stablize at its end-of-life, is considered a flop. 
 
Mac Internet Explorer 1.0
Besides being relatively featureless next to Netscape for Mac, Mac IE 1.0 had a moving Windows logo on it.  Have you ever met a Mac user that wanted a "moving Windows logo" on their desktop?  Nuff said.  The logo was later removed and the new IE 4.0 "e" logo was used instead, but not before people condemned the product thoroughly.  The product had to consistently improve over 4 versions before it overcame the stigma of 1.0.
…the silliness of releasing a big name hyped sister product on a Mac, with a Windows logo on it, in tandem with all the effort put into the product, garners it the designation of a ‘flop’. 
 
Internet Explorer 4.0
In an attempt to leap frog the competition, Microsoft produced Internet Explorer 4.0, a technologically superior product to Netscape Navigator in every feature and in every capability.  Unfortunately, it was by my own personal experience, unstable a whopping 5% of the time and resulted in frequent crashes, slowdowns, and freezes… probably one out of every 10-20 times you ran it.  Memory leaks galore.  Microsoft gathered together 50+ sponsors from various major names on the Internet stating they supported IE 4.0 causing the great Browser Wars that we all remember from that era but it was only until IE 5.0 did we have a faster, more stable browser.
…the huge amount of money, hype, and the ultimate bad impact it had on users was what had me judge 4.0 as a ‘flop’.
 
Windows NT 4.0 Option Pack
Anyone with IT administrative experience will read this and shout, "Oh YEAH.  He’s right."  The Option Pack was a poorly tested, poorly implemented "feature pack" for Windows NT Server 4.0 that included Transaction Server, IIS 4.0, and a number of other technologies.  When installed, it was virtually uninstallable and it had the uncanny propensity to ruin installations of Windows NT.  What made it nefarious was that many admins and app developers really needed the components within the Option Pack, making it very popular to install – causing much diress amongst its users.  The Option Pack was the reason we rarely ship features into Service Packs and instead provide web releases of new functionality.
…I still have a copy of this.  It’s such a flop, I’m thinking of eBaying the sucker for posterity.
 
I keep hearing about companies that block web access from they’re Internet Gateways through the usage of domain filters or active monitors.  Fortunately for us, Microsoft doesn’t block web sites of any kind at our gateway – there’s really no reason to.  They do monitor activity – especially large amounts of traffic – and where that traffic is going, however there’s nothing stopping anyone from going to any site on the web. 
 
BAD:  DOMAIN FILTERING THE GATEWAY
Personally I think this is a futile effort and the wrong way to go about controlling how corporate Internet gateways are used.  I can understand how some IT departments, in a natural reaction of paranoia feel compelled to block certain sites they think could "hurt" the infrastructure through the mistaken download of a virus or the transmission of material that could other wise put the company at risk. 
 
But honestly, I’ve always felt the policy of blocking end users from accessing sites like YahooMail and MySpaces was blatently silly because treating employees like they were children only compels them to want to fight back.  At some point, you have to trust that your employees aren’t going to screw over the company.  And IT can’t ever claim that they’re doing it to "help the company protect itself" being that it’s just as easy to cause infrastructure damage from legitimate sites as from censored sites or from printing… or from faxing… or from the usage of a cell phone or from a camera… etc. 
 
GOOD:  SIMPLY AUDIT LOG EVERYTHING 
We’re all adults and all it takes is a little education around what FTEs should & should not do on company time:  You’re ultimately trusted to not do anything illicit either accidental or on purpose on company resources. 
And if you do, IT security will know.  The key is for IT to monitor all communications. log all communications, and flag connections and the user IDs that opened them that seem suspicious.  It’s called an audit log & everyone should be aware that IT’s is watching you.
 
AND FOR BONUS POINTS…
If you want to take it a step further, simply publish the database of "who accessed what" via an Intranet web site.  This is easy to do using Microsoft Access and can allow any end user to simply type in a name and see what it is that that person accessed through the company gateway.  There’s no expectation of privacy on the corporate network using corporate resources.
 
For those of you having a problem with domain filters, here’s some techniques I’ve used to get around web blocking software at other places.  This is hopefully proof enough that Internet domain filtering is the wrong way to go in protecting a company.
 
The Circumventor
This is a tool that resides on your home PC or any other PC with direct unfiltered web access.  It provides you with a redirecting proxy point (i.e. an unblocked URL) that will allow you to access any web site on it’s behalf.  This has the benefit of providing access via virtually unblockable URLs however the drawback of not being able to passthrough SSL encrypted data and requiring that the individual have a home Internet connection always up and running.
http://www.peacefire.org/circumventor/simple-circumventor-instructions.html
 
AntiProxy
Antiproxy is a list of publicly available Proxy sites to use to anonymize yourself.  Because it is HTTPS based and SSL encrypted, it’s possible to set your browser to not to use proxies for secure connections.  This method has the benefit of providing anonymous proxying over the Internet to anyone without client software and without setting anything at home, however it provides a connection with questionable security and it may have slow connection speeds.
 
HTTPTunnel

HTTP-Tunnel technology allows users to perform various Internet tasks despite the restrictions imposed by firewalls. This is made possible by sending data through HTTP (port 80). Additionally, HTTP-Tunnel technology is very secure, making it indispensable for both average and business communications.  This has the benefit of tunneling everything but the drawback of requiring client software to be installed.

 
Public Web Circumventors
This is the easiest method of circumventing domain filters:  Keep trying a bunch of Web Circumventors until you hit one that works.  Here’s some to check:
 
 
The bottom line is that companies use IT as a crutch some times.  Instead of depending on Technology to protect the company, there should be a lot more emphasis on establishing roles for people and proper process around Internet access monitoring.
 
———————————-
More Tools & References:
Posted by: kurtsh | June 19, 2006

NEWS: New Red vs Blue release has hit the wire!

Red vs Blue dropped a new 720p release online on XBL:  "Out of Mind".  Check it out!
(If you don’t know what I’m talking about don’t worry about it.  It’s not important.)

« Newer Posts - Older Posts »

Categories