TechNet Blogs

Recipes for Success: App-V 4.6 Release Candidate and Office 2010 Integration

mattmcspirit — Tue, 24 Nov 2009 16:22:16 GMT

I blogged about App-V 4.6 a while back, around the beta release timeframe, and also recorded (but didn’t get round to editing!) a screencast using App-V 4.6 beta. Obviously that’s now obsolete, so I’ll have to record it again, but, nonetheless, 4.6 Release Candidate is available, and over on the App-V blog, there’s some specific information on the integration between App-V 4.6 and the brand new Office 2010 beta.

Office has always been one of those workloads where some people will say ‘sure, sequence Office, it’s great!’ whereas others will say ‘whoa there, Office should be part of the base OS build, sequence the add-ins and other apps instead!’. Whichever side of the fence you fall on, the fact that recipes (yes, you read that correctly) exist for sequencing suites of applications like Office, should help to put your mind at ease, and with the latest 4.6 RC release, there’s a specific Office 2010 Beta Deployment Kit for App-V. Very useful indeed.

From the App-V blog, “Our engineering teams have collaborated to address the top customer issues that people were running into when virtualizing past versions of Office. As a result, Office 2010 has a much more integrated user experience”. What does the Office 2010 and App-V integration deliver?

Microsoft SharePoint Integration - You can open, edit, and save Microsoft Office documents using Microsoft SharePoint.
Microsoft Outlook Fast Search - You can use Microsoft Windows Desktop Search to find specific messages in your inbox.
MAPI Proxy - You can connect to your inbox using Microsoft Outlook Send To functionality.
Microsoft Office Document Indexing - You can index your documents so that you can use Microsoft Windows Search to locate files.
Virtual Mail Control Panel icon - You can use the Email icon in Control Panel to perform advance mail configuration.
URL protocol handler - You can configure links in the browser and specify the appropriate associated Microsoft Office application.
Send to Microsoft OneNote Printer driver - You can print documents to Microsoft OneNote.

Ready to rock?

Here’s what you need to get going:

1. Download Office 2010 Beta here

2. Download the Microsoft Office 2010 Deployment Kit for App-V (Beta)

3. Download App-V 4.6 RC on Microsoft Connect

4. Read the App-V recipe for sequencing Office 2010 Beta on Microsoft Connect.

For detailed information on whether your environment meets the requirements of Office 2010 and App-V 4.6 RC, please refer to the App-V recipe.

Happy ~~cooking~~ sequencing! :-)

Get On The Bus Tour Presentation

Stephen L Rose — Tue, 24 Nov 2009 15:59:39 GMT

Some of you had asked for the presentation I used on the Bus Tour. Thank you again all of you who attended the sessions. Bus Tour Windows 7 Deck (Full) View more presentations from Stephen L Rose ....(read more)

Cumulative Update #5 for SQL Server 2008 Service Pack 1 / Cumulative Update #8 for SQL Server 2008 RTM 提供開始

tskitaga — Tue, 24 Nov 2009 15:36:00 GMT

マイクロソフトの北川です。

更新が滞っており申し訳ありません。次期リリースである SQL Server 2008 R2 のプラン作成およびデモ作成にかかりっきりで、毎度のことながらブログの更新が滞っておりました。

SQL Server 2008 R2 のプランは、代田橋オフィスで静かになされておりました。

肝心の部分がぼやかしてあるのは出荷前の製品につきご了承ください。もうすぐ皆様にお伝えすることができる予定です。

閑話休題。

米国時間11月17日に下記 Cumulative Update (CU: 累積的な更新プログラム) が提供開始となりました。

参照: Microsoft SQL Server Release Services ブログ(英語)

CU#5 for SQL Server 2008 SP1

CU#5 for SQL Server 2008 SP1 は SP1 リリース以降に提供された Hotfix をすべて含んでいます。

CU#5 for SQL Server 2008 SP1 KB Article (英語)
http://support.microsoft.com/kb/975977/en-us
報告された問題に対する修正プログラムを提供する SQL Server チームの増分サービスモデル (ISM) について
http://support.microsoft.com/kb/935897

CU#8 for SQL Server 2008 RTM

CU#8 for SQL Server 2008 RTM は SQL Server 2008 RTM リリース以降に提供された Hotfix をすべて含んでいます。

CU#8 for SQL Server 2008 RTM KB Article (英語)
http://support.microsoft.com/kb/975976/en-us
報告された問題に対する修正プログラムを提供する SQL Server チームの増分サービスモデル (ISM) について
http://support.microsoft.com/kb/935897

システムを最新の状態に保つため、上記 KB をご確認のうえ、最新の CU の適用をご検討いただければと思います。

More proactive guidance from HP around Hyper-V and Exchange 2010

mattmcspirit — Tue, 24 Nov 2009 15:26:11 GMT

Patrick, from the MVUG blog, has fired across a couple of other useful titbits of information that the guys at HP have been working on around both Hyper-V, and Exchange 2010, from both a server, and storage perspective.

From blog post #1:

HP has released "HP recommended configuration for Microsoft Exchange Server 2010 - StorageWorks EVA8400 using CA-EVA and CLX-EVA". With the release of Microsoft Exchange Server 2010 (Exchange 2010) there are many new design features and configuration options to consider. To better understand how to deploy theses new features with HP servers and storage, HP has developed a series of recommended configurations. The recommended configurations provide sizing guidance and deployment options to support the new Exchange 2010 solutions. The configurations described in this guide are meant to assist you in designing solutions that address your email business requirements.

The recommended configurations provide server and storage sizing details for deploying Microsoft Exchange 2010. In this reference configuration the Exchange server roles have been placed on virtual servers using Microsoft Windows Server 2008 R2 Hyper-V (Hyper-V). The advantage of this solution is that it allows the use of Hyper-V Live Migration for the mailbox servers. The solution has been sized to support 20,000 users with 512MB mailboxes. The hardware featured in this configuration is the HP ProLiant BL460c G6 (BL460c G6) server blade used to host the virtualized Exchange server roles and the HP StorageWorks 8400 Enterprise Virtual Array (EVA8400) to manage the storage needs.

You can download the above document from here

This will be a really useful document, particularly around the storage side, based on the changes brought about in Exchange 2010.

From blog post #2:

HP has released "Implementing Microsoft Windows Server 2008 R2 Hyper-V and Microsoft Hyper-V Server 2008 R2". The purpose of this document is to help customers install the following Microsoft hypervisor (Hyper-V) enabled products:

Microsoft Windows Server 2008 R2 Hyper-VTM (The Hyper-V server role within Windows Server 2008 R2)

Microsoft Hyper-V Server 2008 R2

This document describes the level of support available for these Hyper-V enabled products running multiple guest operating systems on a single server and addresses the following key topics:

Introduction to Microsoft products that provide Hyper-V functionality

Recommended system configurations

Hardware prerequisites

Supported configurations of HP ProLiant servers

Procedures for new installations

Known issues and workarounds

You can download the above document from here

Key thing to note here, and it’s something Patrick explicitly called out to me, is the support around Hyper-V Server 2008 R2. This document details both the free Hyper-V Server 2008 R2, and the Hyper-V role of Windows Server 2008 R2. Important to note, not all vendors support Hyper-V Server 2008 R2, so if you’re thinking of deploying this one, make sure you check first!

Get a free online security review

Microsoft Small Business — Tue, 24 Nov 2009 14:49:00 GMT

We’ve said it before but it’s worth repeating – your data underpins your business. If your data – or your systems – are compromised, your business could be at risk. Use our free Security Assessment Tool to get an online review of your security. You can download a report at the close of the 15-minute assessment and use it to determine your requirements. A Microsoft Small Business Specialist will be happy to offer advice and suggestions on how you can protect your data and your business.

Showing Web-based Content in a Custom View

Travis Wright — Tue, 24 Nov 2009 14:48:00 GMT

This is a guest blog post from one of our System Center MVPs – Maarten Goet- from the Netherlands. Maarten is a Managing Consultant at INOVATIV, the System Center specialists. He blogs on Techlog and SystemCenterCentral and is a regular speaker at Teched and the Microsoft Management Summit.

I showed him a way to display web-based content in a Service Manager overview view type in exchange for him agreeing to write this blog post so I wouldn’t have to because I am lazy. :) Thanks Maarten! Anybody else interested in learning top secret tricks in exchange for writing guest blog posts can email me (email alias: twright).

====================================================================================================

In Travis Wright’s article on Creating Workspace (aka “Wunderbars”) in System Center Service Manager (SCSM) he talked about how partners and customers can extend SCSM to show a workspace for a custom developed SCSM solution. Now that you have that workspace set up, how can you show your own content? This article will walk you through a sample.

Let’s assume that your solution is web-based. You do not want to re-engineer the application to be able to use it in System Center Service Manager, but do want to be able to provide the functionality to IT analyst using the SCSM console.

First step, make sure that you have the sample management pack bundle available. Open the Microsoft.Demo.NewWorkspace.xml with your favorite XML editor and add the following section after </Categories> but before <Presentation>:

<xsd:any minOccurs="0" maxOccurs="unbounded" processContents="skip" xmlns:xsd="http://www.w3.org/2001/XMLSchema" />

</Configuration>

<Assembly>Console!WpfViewsAssembly</Assembly>

<Type>Microsoft.EnterpriseManagement.UI.WpfViews.Overview</Type>

</ViewImplementation>

</ViewType>

</ViewTypes>

</PresentationTypes>

This will declare a presentation type called “OverviewType” for your management pack. It references the Console library management pack’s “WPF Views Overview” type. Essentially this will allow you to show your web-based solution where normally the Overview page would be. Next step, add the following section after <Presentation> but before <Folders>:

<Views>

<Category>Overview</Category>

</Content>

</Presentation>

</Configuration>

</View>

</Views>

This will declare a view called “View.Overview” of the type “OverviewType”. Now have a look at the yellow highlighted section called “Source”. This is actually the configuration where you specify the URL that should be shown once a user opens this view. Replace it with the URL of your web-based solution.

Tip: The System Center Service Manager console actually uses the IE engine to show/render the pages. Settings in IE will thus influence if a proxy server will be used etc.

Next step, add the following section after </Folders> but before <ImageReferences>:

</FolderItems>

This will declare a folderitem for our Overview view under the ‘root’ of our custom workspace. For the last step, add the following section just before </DisplayStrings>:

<Name>Overview</Name>

<Description>My web-based solution</Description>

</DisplayString>

This will make sure that a displaystring will be available for our View. Customize it as appropriate. Finally, increment the version number:

<ID>Microsoft.Demo.NewWorkspace</ID>

</Identity>

Now, save the management pack file. Follow steps 9 through 10 from the previous article to create a new management pack bundle and import it into System Center Service Manager. Open the SCSM console and click on the New Workspace “workspace” to see it in action:

This is a clear example of how flexible the System Center Service Manager platform is, and how partners and customers can extend it.

-- Maarten Goet (MVP)

====================================================================================================

Thanks again Maarten for writing this up. Just to give some practical perspective on this I'd like to share what Maarten has been doing with this. They are taking their existing solution for capacity management using SCOM and making a managment pack to visualize capacity management information in a new workspace for Service Manager. Check out some early screenshots:

As you can see, Maarten is bringing in reports from SQL Reporting Services. You could do the same with any number of reports you have in your organization – Service Manager reports or anything else.

Here is my next top secret tip…. What I showed Maarten is just the beginning. Look up above in the XML Maarten provided. Inside of the <Content> element Maarten put a <WebBrowser> element. You can put any kind of XAML you want to inside of that <Content> tag. For example, you could create a table of WebBrowser elements which each host different web-based content to create a dashboard look. You could put buttons, images, forms, user controls, etc… in there. The Administration overview page is built using this technique so you get the idea of what is possible.

Remember the blog post about hacking XML like a pro? Export out the Microsoft.EnterpriseManagement.ServiceManager.UI.Administration MP to see how we built the Administration overview page.

If you build something interesting using this technique and write a blog post about it, you could be the next guest blogger! Send me an email with your creation!

Maarten’s MP is attached.

Exchange 2010: And then there is the long awaited cmdlet Add-MailboxFolderPermission

ilvancri — Tue, 24 Nov 2009 14:31:00 GMT

So many new features have been included in Exchange 2010, that it would indeed take me more than days to talk about all of these, but there are so many very nice features that you should keep in mind when thinking about Exchange 2010, and one is these is the new built-in cmdlet "Add-MailboxFolderPermission".

What's this: Add-MailboxFolderPermission

Looking at the description posted on TechNet this cmdlet enables you to "manage folder-level permissions for all folders within a user's mailbox", meaning you can use this cmdlet to delegate any of the following roles to any mailbox folder for any mailbox-enabled user in your organization, given you have sufficient permissions :-)

(Source = Add-MailboxFolderPermission)

ReadItems The user has the right to read items within the specified folder.
CreateItems The user has the right to create items within the specified folder.
EditOwnedItems The user has the right to edit the items that the user owns in the specified folder.
DeleteOwnedItems The user has the right to delete items that the user owns in the specified folder.
EditAllItems The user has the right to edit all items in the specified folder.
DeleteAllItems The user has the right to delete all items in the specified folder.
CreateSubfolders The user has the right to create subfolders in the specified folder.
FolderOwner The user is the owner of the specified folder. The user has the right to view and move the folder and create subfolders. The user can't read items, edit items, delete items, or create items.
FolderContact The user is the contact for the specified public folder.
FolderVisible The user can view the specified folder, but can't read or edit items within the specified public folder.

The AccessRights parameter also specifies the permissions for the user with the following roles, which are a combination of the rights listed previously:

None FolderVisible
Owner CreateItems, ReadItems, CreateSubfolders, FolderOwner, FolderContact, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems
PublishingEditor CreateItems, ReadItems, CreateSubfolders, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems
Editor CreateItems, ReadItems, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems
PublishingAuthor CreateItems, ReadItems, CreateSubfolders, FolderVisible, EditOwnedItems, DeleteOwnedItems
Author CreateItems, ReadItems, FolderVisible, EditOwnedItems, DeleteOwnedItems
NonEditingAuthor CreateItems, ReadItems, FolderVisible
Reviewer ReadItems, FolderVisible
Contributor CreateItems, FolderVisible

The following roles apply specifically to calendar folders:

AvailabilityOnly View only availability data
LimitedDetails View availability data with subject and location

The permissions you need in order to be able to do so, are any of the followin built-in management roles (as stated here), there is no need to have been granted full mailbox access prior to being able to change those folder permissions (!): Organization Management, Recipient Management, Help Desk.

Let's have a look at an example. Here are the permission settings for my test mailbox Ilse, and as you can see, these are the default settings, without previous changes:

Can we get this information using the power of the (Remote) Exchange Management Shell? Yes, by using the cmdlet Get-MailboxFolderPermission, as can be seen in the example below, when running Get-MailboxFolderPermission ilsevancriekinge@exchange.local:\Calendar

And then we can run the following cmdlet to add User7 with the permission of Editor:

Add-MailboxFolderPermission -Identity ilsevancriekinge@exchange.local :\Calendar -User user7@exchange.local -AccessRights editor

And when checking with Microsoft Office Outlook, it's clear the permissions have been set:

-Ilse

Välkommen på paneldebatt om framtidens skola

Microsoft Nyhetsblogg — Tue, 24 Nov 2009 14:24:00 GMT

Sverige behöver lärare som kan utbilda för framtiden, men saknar själva redskapen. I nästan 9 av 10 skolor saknar lärarna personliga datorer som arbetsredskap, visar en ny undersökning. Välkommen till ett samtal och diskussion om hur vi kan bygga framtidens skola.

Deltar gör bland andra Metta Fjelkner, Lärarnas Riksförbund, Maria Stockhaus, ordförande för beredningen för utbildningsfrågor inom SKL, Ann-Charlotte Eriksson, 1 vice ordf Lärarförbundet, Mikael Damberg, riksdagsledamot och ledamot av utbildningsutskottet och Bo Kristofferson, skolledare på Viktor Rydberg gymnasium.

Tid: 1 december kl 08.00-09.30
Plats: Berns Salonger, Spegelsalen, Berzelii Park, Stockholm. Vi bjuder på frukost

Anmäl dig till v-jolind@microsoft.com senast den 25 november.

Saga Microsoft Project

Franck Mercier — Tue, 24 Nov 2009 14:23:09 GMT

Après de nombreuses demandes de votre part, voici enfin tous les épisodes de la saga Project:

http://www.microsoft.com/france/office/project/webcasts/saga-project.aspx

Tout arrive à point……….

Reform Health Care by Re-empowering Consumers

pnblog — Tue, 24 Nov 2009 14:20:00 GMT

For my latest thoughts on consumer engagement and its relation to health care reform, please see my contribution to the Harvard Business Review Conversation Starter blog.

Desktop upgrades, the easy way…

mattmcspirit — Tue, 24 Nov 2009 14:19:28 GMT

Upgrading a desktop OS isn’t always easy(!). Typically, users have the OS, intertwined with lots of applications, favourites, files, folders and other profile-related goodness. With all this interlinked deeply, it makes replacing one part of it that bit more difficult. With that in mind, separation is a good thing! Separating the OS from the apps, which technologies like App-V, or XenApp can help with one part of it, and by combining this with capabilities like Roaming Profiles, and Folder Redirection, things improve still further.

For things like VDI (Virtual Desktop Infrastructure), and specifically, Pooled Virtual Desktops (where users can get a random virtual desktop each day of the week!), the use of separation becomes near-essential. This post is by no means, a war-and-peace overview of my thoughts on VDI (more on that in the future!), but I’d like to point you at this video on Citrix TV, which for me, really highlights the power that VDI can bring in areas such as desktop refresh.

By separating the apps, the OS, and the ‘user’, it increases manageability, yet streamlines IT Operations from a desktop management perspective. If you’re on the fence when it comes to VDI, you can’t deny that it has the potential to be extremely dynamic and flexible, providing the work is put in at the backend first. When it comes to the backend infrastructure, something I was always told at University (but rarely followed it!) was ‘fail to plan, plan to fail’. Put the work in on the infrastructure, Active Directory, networking and so on, and these will have a dramatic improvement on the way you deploy and manage desktops.

Screencast: System Center Operations Manager 2007 R2 – Service Level Dashboard part 2 Installation

Matt-MS — Tue, 24 Nov 2009 14:15:00 GMT

Here is part 2 of the screencast series, were you will learn how to install the dashboard. The dashboard provides a way for managers, application owners, and IT professionals to monitor the availability and performance of business-critical applications and to view the reported data on a single web-based interface. BTW it is a free solution accelerator.

Resources:

For More Information on the Dashboard take a look here: www.microsoft.com/sld
Or you can email feedback for the dashboard: sldblog@microsoft.com
You can also look at all of the Solution Accelerations take a look here: http://technet.microsoft.com/en-us/library/cc936627.aspx

To view the other parts take a look here:

Part 1 Introduction: Screencast: System Center Operations Manager 2007 R2 – Service Level Dashboard part 1: Introduction

Algumas práticas recomendadas para sua infra-estrutura (parte 1/2)

rodias — Tue, 24 Nov 2009 13:16:14 GMT

Algumas pessoas me perguntam o que realmente devem promover em suas infraestruturas para reduzir os custos e a complexidade. Na prática, iniciativas relativamente simples de serem implementadas ajudam muito a reduzir a complexidade (tradução: menos dores de cabeça) e os custos (tradução: seu chefe mais contente com você), confira algumas delas: Padronizar um único Sistema Operacional para Estações de Trabalho Organizações que padronizaram o sistema operacional de estações de trabalho economizaram...(read more)

Failed to activate Office Communications Server Standard Edition Server

greganth — Tue, 24 Nov 2009 12:23:05 GMT

When you deploy a new installation of Standard Edition Server activation fails if security update 974571 is installed and the fix mentioned in http://support.microsoft.com/kb/974571 has not been applied to the server.

The following is logged in the Office Communications Server 2007 R2 Deployment Log

Failure [0xC3EC796C] One or more errors occurred during the execution of the wizard; the wizard was unable to complete successfully. Please check the log file for more information.

The following is logged in the Activate Standard Edition Server Log.

Failure [0xC3EC78DB] Failed to read the Office Communications Server version information. This can happen if the computer clock is not set to correct date and time.

The following event is logged in the Office Communications Server event log in Event Viewer on the affected server:

Event Type:    Warning
Event Source:    OCS Setup
Event Category:    (1007)
Event ID:    30502
Date:        Date
Time:        Time
User:        N/A
Computer:    Computer
Description:
Failed to activate Office Communications Server Standard Edition Server on machine Computer.
Error: C3EC78D8
Description: Failed to read the Office Communications Server version information. This can happen if the computer clock is not set to correct date and time.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Obama och Microsoft inspirerar studenter

Anna Lundmark — Tue, 24 Nov 2009 12:14:00 GMT

Igår presenterade president Barack Obama initiativet Educate to Innovate som syftar till att inspirera studenter i USA att utvecklas och växa inom vetenskap, teknik, ingenjörsvetenskap och matematik (STEM) - för att de ska vara bättre rustade för framtiden och kunna lösa morgondagens problem.

Även Microsoft har en viktig del i detta arbete genom att på olika sätt bidra med kunskap, teknik och erfarenhet. Inom detta initiativ i USA sponsrar vi till exempel en nationell tävling som syftar till att ta fram nydanande interaktiva och lärande dataspel för barn och ungdomar i åldersgruppen 12-16 år.

Här i Sverige har vi bland annat precis lanserat Mattecoacher på nätet, som kompletterar de redan pågående initiativen DigiGirlz och Climate Mystery.

Service Manager Beta 2 Update

PL System Center — Tue, 24 Nov 2009 11:46:30 GMT

Ukazała się aktualizacja do bety SCSM2010. Wnosi ona prę nowych funkcjonalności:

Wsparcie dla Compliance and Risk Process Management Pack
Administratorzy mogą wybierać, które paczki SCCMowe pokazać użytkownikom przez Self Service Portal
Włączenie importu CI z własnych obiektów SCOM
Connector AD wspiera import z domen z innych lasów nie będących w relacji zaufania
Nowa obsługa błędów i timeoutów w workflowach oraz pozwolenie administratorom na ponowne ich uruchomienie jeśli potrzeba
Naprawiono błędy w tworzeniu własnych przepływów
Członkowstwo grup jest teraz odświeżane automatycznie
Szablony (templates) będą działać po usunięciu listy wartości (values)
Kategorie bazy wiedzy zyskały możliwość dostosowywania
Naprawiono błąd związany z nieprawidłowo wyliczanym parameterm ‘time worked” w raporcie Incident Analyst

Więcej szczegółów tutaj: http://scug.be/blogs/scsm/archive/2009/11/23/availability-of-service-manager-beta-2-update.aspx

Z sieci wygrzebał: Daniel Stefaniak

Arçelik SAP Uygulaması için SQL Server tercih etti!

gokben.utkun@microsoft.com — Tue, 24 Nov 2009 11:33:00 GMT

Avrupa’nın en büyük elektrikli ev eşyası üreticilerinden biri olan Arçelik, küresel operasyonlarını yönetmek için SAP kurumsal kaynak planlaması (ERP) çözümünü kullanıyor. Yazılım ve donanım altyapısını yenilemek isteyen Arçelik, HP sunucularda barındırılan Microsoft® Uygulama Platformunu seçti. Microsoft/HP çözümüne geçmeye ve ayrıca veritabanı yazılımını Windows Server® 2008 Enterprise işletim sistemi üzerinde çalışan Microsoft SQL Server® 2008 Enterprise ile güncellemeye karar verdi. Yazılım, HP Integrity rx8640 ve HP ProLiant DL380 sunucular üzerinde barındırılıyor. Bu çözüm Arçelik’e 3 kat daha yüksek performans ve daha düşük bir toplam sahip olma maliyeti sundu. Müşteri başarı hikayesi için adresine, video için adresine tıklayın.

Konu ile ilgili basın yansımalarına ise aşağıdaki linkerlerden ulaşabilirsiniz :

Arçelik ' te sistemleri yenilemek bakımdan ucuza geldi - BT Haber

Teknoloji devleri Arçelik için buluştu - Ekonomik Çözüm

TEKNOLOJİ DEVLERİ ARÇELİK ' LE BULUŞTU - Bugün

Arçelik yazılım altyapısını yeniledi - Cumhuriyet

Arçelik teknoloji altyapısını yeniledi - Posta

Arçelik devleri BULUŞTURDU - Türkiye

Teknoloji devleri Arçelik için buluştu - Vatan

Arçelik teknik altyapısını güçlendirdi - Yeni Şafak

http://samanyolugazetesi.com/2009/default.asp?inc=hbrk&hid=7117 - Samanyolu

http://gundemekonomi.com/haber_detay.asp?haberID=757 – Gündem Ekonomi

Exchange 2010 Launch Roadshow #1 PostCTI : Manchester City

Brettjo — Tue, 24 Nov 2009 11:28:23 GMT

I’m currently on my way back from our first Exchange 2010 Launch hosted at the Manchester City Football Stadium, hosted by PostCTI.

All in all a good day and the tour round the Stadium was great – including the heated seats in the Directors box..!

As promised – you can grab the slide deck I delivered from here at my Office Live Workspace.

Other Links I quickly discussed in the session where:

Exchange 2010 Cost Savings Calculator

http://www.microsoft.com/exchange/2010/en/us/Exchange-Calculator.aspx

Forrester Total Economic Impact

“Total Economic Impact” study which concludes organizations can expect a payback period of less than six months with Exchange 2010.”

http ://download.microsoft.com/download/7/5/0/75068B44-0A70-4BBF-9824-01ECF076F7AE/TheTotalEconomicImpact_pdf_11042009.pdf

Exchange Connections

http://www.thenewefficiency.com/exchangeconnections

The New Efficiency – Exchange 2010 (UC Track)

http://vepexp.microsoft.com/thenewefficiency/?s=5573

Stephen Elop Exchange Announcement

http://www.msteched.com/online/channels.aspx?cname=track&channel=

(Exchange 2010 35mins in)

Forefront for Exchange 2010

http://edge.technet.com/Media/FPE-vs-FOPE-and-Exchange-2010--Secure-messaging-with-Forefront/

Microsoft.com Exchange 2010 Website

http://www.microsoft.com/exchange/2010/en/us/default.aspx

Настройка DirectAccess

Fedor — Tue, 24 Nov 2009 11:06:00 GMT

КРАТКИЙ ОБЗОР

В качестве ввеедения - очень краткий технический обзор технологии. Более подробно можно прочитать на блогах моих коллег "по цеху" (по Microsoft), например на блоге Андрея Бешкова, или на нашем официальном сайте www.microsoft.com/rus/windowsserver2008r2.

Для начала краткий экскурс в IPv6, т.к. DirectAccess работает только по IPv6. Сразу хочу успокоить читателей, в современных сетях, использующих IPv4 работать технология будет (в том числе и через IPv4 интернет). Самое существенное ограничение - через DirectAccess не будет работать доступ к старым серверам (Windows 2000 Server и младше). Могут быть прблемы и с доступом к Windows Server 2003. На него надо будет устанавливать поддержку IPv6. Полная поддержка IPv6 (включая поддержку IPv6 со стороны всех служб ОС есть только в Windows Vista и Windows Server 2008 и старше). Это ограничение можно попытаться обойти используя portproxy или устройства NAT-PT. Первая технология (portproxy) позволяет проксировать TCP трафик из IPv6 и перенаправлять его на IPv4 сервера. Вторая, (NAT-PT) работает по принципу NAT'a только преобразует IPv6 трафик в IPv4 и наоборот (никакого отношения к Teredo не имеет). Но и с этими технологиями могут возникнуть сложности, т.к. portproxy хотя и поддерживается в Windows Server 2008, но проксирует только TCP. Что делать с UDP трафиком не понятно. NAT-PT в Windows не реализовано, так что надо смотреть в сторону производителей оборудования...

Тем, кого не испугали ограничения, предлагаю перейти к настройке DirectAccess.

НАСТРОЙКА

Сразу хочу оговорится. Пример настройки, приведенный ниже, стоит рассматривать только как пример. Это ни в коем случае не перевод нашей официальной документации с сайта technet.microsoft.com. Также этот пример не учитывает всех особенностей реальных сетей реальных организаций. Цель этого примера - показать короткий путь запуска технологии. Детали рекомендую изучать по technet.microsoft.com.

Необходимо:

1. Контроллер домена (DC) под управлением Windows Server 2008 R2

2. Сервер, член домена, под управлением Windows Server 2008 R2. Здесь только R2, т.к. на ранних версиях Windows Server DirectAccess не работает. Этот сервер будет шлюзом. Пусть называется DA.

3. ПК с Windows 7 enterprise или ultimate.

DC должен быть настроен как обычно (статические IPv4 адреса, DNS и пр.). Единственное замечание, нельзя отключать IPv6. Иначе не будет работать.

Также установите IPv6 адрес FD00:0:0:1::1/64. DNS IPv6 - ::1, шлюз IPv6 – FD00:0:0:1::2 (такой адрес будет у DA). Адрес FD00:0:0:1::1 является unique local и рекомендован к использованию внутри организации. (Что-то на подобии private IP адресов в IPv4, 192.168.0.0, 172.16.0.0, 10.0.0.0). В данном адресе FD00 - неизменная часть, далее может быть любая комбинация чисел.

DA должен иметь два разных сетевых интерфейса. Один подключен к внутренней сети, другой - к интернет на прямую. Через NAT работать не будет. При этом на интерфейсе, подключенном к интернет, должны быть настроены два внешних IPv4 адреса. Адреса должны быть последовательными.

На внутреннем интерфейсе прописываем IPv4 адрес для связи с DC и DNS-суффикс подключения = имени домена (в моем примере домен contoso.com), а также IPv6 адрес. Опять же я использовал unique local адрес (т.е. из сети FD00). У меня это FD00:0:0:1::2/64. DNS - FD00:0:0:1::1 (адрес DC).

Далее, необходимо установить службу маршрутизации (она находится в ролях и является частью роли Network Access and Protection Server). Необходима только эта служба, другие службы роли устанавливать не надо.

RRAS влючаем и настраиваем как маршрутизатор IPv6 в локальной сети. Маршрутизацию вызова по требованию можно отключить. Маршрутизацию IPv4 тоже.

Далее необходимо выдать сертификаты для компьютера DA и компьютера с Windows 7. Думаю, это все умеют делать. Не забудте добавить сертификат вашего центра сертификатов в качестве trusted root certificates на сервере DA и Windows 7. Удобнее это сделать с помощью GP.

Нам понадобится роль IIS или любой ПК с установленной ролью IIS. Т.к. ПК c Windows 7 определяет свое месоположение (в корпоративной сети или в интернет) путем запроса к определенному, заранее настроенному url. Этот url должен работать внутри сети и не должен работать снаружи. URL имеет вид https://<FQDN сервера с IIS>/insideoutside, в моем примере https://dalocation.contoso.com/insideoutside. Вам надо будет указать только <FQDN сервера с IIS>. Все остальное мастер сделает автоматически. По адресу insideoutside создается пустая html страничка. Для выбранного IIS сервера необходим сертификат, который надо будет установить на этот сервер в настройках IIS. При запросе сертификата необходимо указать common name = <FQDN сервера с IIS>, в моеме примере это dalocation.contoso.com и DNS имя = <FQDN сервера с IIS>, в моеме примере это опять же dalocation.contoso.com.

Теперь собственно настройка DirectAccess.

Затем идем в меню Пуск -> Administrative Tools -> DirectAccess Management и далее в раздел setup. Если все ранее описанное выполнено правильно, то вы увидете 4 шага по настройке DirectAccess. Здесь начинается самая простая стадия в настройке DirectAccess :-)

Итак, шаг 1, remote clients. Edit -> добавить группу, в которой будут компьютеры, подключающиеся по DirectAccess. Группа должна быть создана в AD в ней должны быть учетные записи компьютеров, которым будет предоставлен доступ через DirectAccess. Компьютеры должны быть в домене. Теперь нажать Finish.

Шаг 2, DirectAccess Server. Edit -> Interface Connected to Internet, выбираем сетевой интерфейс, подключенный к интернет и interface connected to internal network выбираем интерфейс, подключенный к внутренней сети. Next. IPv6 prefix пишем FD00::/48 если вы выбрали использование unique local как это делал я. IPv6 prefix to assign to remote clients FD00:0:0:5555::/64. Next. Select the root certificate -> Browse -> выбираем корневой сертификат, Finish.

Шаг 3, Infrastructure Server. Edit -> Network Location Server is run on the DirectAccess server. Выбираем сертификат для веб-сервера. Этот же сертификат был установлен на веб сервер ранее. Next. В табличке, в колонке name suffix должен быть уже написан внутренний домен (у меня это contoso.com) и IPv6 адрес DNS сервера FD00:0:0:1::1. И имя исключения, у меня это dalocation.contoso.com. Адреса DNS напротив него быть не должно. Если в табичке написано что-то отличное от имени домена и FQDN IIS сервера (contoso.com и dalocation.contoso.com), то вы что-то сделали не так и скорее всего у вас ничего не заработает. Local name resolution, выбираем второй пункт. Next, Finish.

Шаг 4. Edit -> Require no additional end-to-end authentication, т.е. дополнительного шифрования/аутентификации для доступа к внутренним серверам не требуется.

Все! Теперь осталось нажать Save и Finish, будут сформированы групповые политики, эти политики надо применить к серверу и клиентам (gpupdate) и наслаждаться доступом через DirectAccess! Т.е. если ПК с Windows 7 имеет внутренний IPv4 адрес (IPv6 адрес ему не нужен), то доступ к ресурсам сети идет напрямую (сетевое расположение – contoso.com, доменная сеть). Если ПК подключен к интернет с внешним IPv4, то доступ через Direct Access и сетевое расположение – публичная сеть. При это доступны ресурсы корпоративной сети (по именам серверов) и сам компьютер может управляться из корпоративной сети (например к нему можно подключиться удаленным помошником).

IPv4 адрес в случае подключения к интернет должен быть внешним. Чтобы заработали серые IP адреса (компьютер в интернете, но за NATом), необходимо настроить isatap или teredo.

Ta igen PDC på webben

Sofie Grant — Tue, 24 Nov 2009 11:02:00 GMT

Nu finns många sessioner från PDC tillgängliga på webben. Om du inte var på plats i Los Angeles, eller om du inte hann med alla sessioner som du ville gå på kan du nu se vissa av dem på nätet. Klicka på rubriken för att se om det finns video-material från den presentationen som du är intresserad av.

Det finns sessioner om Silverlight 4, Windows Identity Foundation, SharePoint 2010, Windows Server 2008, Visual Studio 2010 och mycket annat. Om du är intresserad av att höra mer om Windows Azure kan du se bland annat Windows Azure Present and Future och Lap Around Windows Azure.

62 valientes

Carles Del Collado — Tue, 24 Nov 2009 10:52:00 GMT

Y por las pintas, ninguno es estudiante. 62 valientes se han acercado a la sala del evento esta mañana. Los ponentes agradecerán que el perfil de la audiencia sea profesional, porque ha habido plazas en que cuando han comenzado a meterse en harina, parte de la audiencia ha salido despavorida a la hora del café en el mejor de los casos. En el peor, ha habido que llamarles ha atención (en una sola ocasión).

Sin duda, Windows 7 es un reclamo para que institutos, centros de formación profesional vean interesante la sesión y se acerquen, pero si es necesario mantener el nivel de la sesión. El target es el target, y el target de los eventos del TechNet son los ITPROs.

Dynamics AX MVP builds a Configuration Launcher

indiamvp — Tue, 24 Nov 2009 10:33:47 GMT

Arijit Basu, a Dynamics AX MVP from Kolkata, India, has often seen that it becomes difficult to manage AX Configurations in an implementation. To relieve this pain in one of his implementations, he came up with an AX Configuration Launcher which can be installed on each user’s machine.

The launcher creates two local folders, one for .axc files and other for .url files. This launcher then shows all the files in groups to the user. These two folders can now be remotely updated/ synced by the admin so when new configurations are available, it is dropped into these folders and end users can access them. Also when existing configurations are no longer used, they can be remotely removed from the folders.

In version revisions, Arijit has revamped the user interface, and added the ability to sync from a centralized network share and to configure the application.

Download - AX Configuration Launcher

Las Palmas, sin querer ver el mar

Carles Del Collado — Tue, 24 Nov 2009 10:23:00 GMT

Pues si. Aquí estamos, en Las Palmas de Gran Canaria. En el hotel Meliá Las Palmas. La sala, tiene unos ventanales que dan a la playa, la playita. La temperatura, 23 grados. Y la pregunta es: ¿Y qué hacemos aquí? Pues presentar Windows 7, Windows Server 2008 R2, las nuevas soluciones de virtualización, Exchange 2010, nuevas herramientas de seguridad como Forefront, etcétera. Porque somos profesionales, qué caramba.

Eso si, saber que la piscina esta _justo_ encima de nuestras cabezas, en el piso superior, es también tentadora. Eso y que el bañador está en la maleta, cantando melodiosamente como una sirena. Pero no somos un Ulises cualquiera. ¡Resistiremos!

簡単・安全に社内ネットワークにリモート接続！DirectAccess (発展編)

Sysplag — Tue, 24 Nov 2009 10:00:00 GMT

みなさん、こんにちは。前回、基本編として DirectAccess の紹介と接続する際の仕組みについて紹介させていただきました。今回は発展編ということで DirectAccess の設定方法について紹介してみたいと思います。前回の記事をご覧になっていない方はコチラからお読みください。前回の記事で DirectAccess は「グループポリシーベースで設定が可能」と紹介しました。でもグループポリシーを「DirectAccess」で検索しても1つしか検索結果は出てきません。DirectAccess を設定するための専用のポリシーがあるのではなく、IPv6 や Windows 7 の新機能 Name Resolution Policy Table (NRPT) の設定を行うことで DirectAccess が利用可能になります。１．DirectAccess 管理コンソールのインストールサーバーマネージャーから [機能の追加] を行い [DirectAccess 管理コンソール] を選択すると [DirectAccess の管理] スナップインがインストールされます。このスナップインから、ウィザードを使用して...(read more)

Guldchans till alla med Xbox

Microsoft Nyhetsblogg — Tue, 24 Nov 2009 09:31:00 GMT

I helgen (den 27 – 29 november) kan alla som har en Xbox 360 med internetuppkoppling få tillgång till alla funktioner som vanligtvis är reserverade för Guldmedlemmar. Det enda du behöver göra är att registrera ett kostnadsfritt Silverkonto via hemsidan.

Ta chansen att testa Facebook, Twitter, se film och spela spel direkt via Xbox LIVE på årets spelmaskin 2009.

IDG, Gamereactor och Helsingborgs Dagblad har redan skrivit om detta.