Please let me know what techniques you've found useful to tackle the growing menace of malware. Do you find techniques such as using low privilege for day to day operations to be something you can achieve? Running as non-admin should theoretically...

The Administrator Accounts Security Planning Guide has recently been posted to TechNet and hence is available for free download. It's a great place to start in reviewing how you manage privileged access. What ever type of user you are it's important to...

Children of course think they know best. I know I did. Some would argue I still think I'm right too much of the time! When it comes to the serious matter of teaching Children how to be safe on the Internet the folk who created Nettysworld are certainly...

I was researching for a piece on security culture when I found an excellent post which included a paper given by Harris Miller(president of the Information Technology Association of America (ITAA)) on Internet Security to a Senate committee. I like the...

There's a good definition of both Phishing and Pharming here together with discussion of DNSSEC(in the comments to the post) which comprises a proposed enhancement to DNS which would stop the majority of native attacks including posioning. DNSSEC as a...

Last night I went to my first GeekDinner (details of future UK events can be found here ) which took place in London. This was a real community activity - two hundred people met in a restaurant to talk about "stuff". The only thing we all had in common...

I'm finding word of mouth networks / social networks incredibly interesting - the Geek Dinner being a classic case in point. Robert spoke about his experience as a blogger and the impact that such networks have had on him and the world at large. It was...

Earlier today I received an email titled "I EXPECT YOUR REPLY ." - the body text suggested that by replying I'd receive a huge sum of money. Clearly this is a scam. Don't reply as doing so would confirm that your email address is valid/live and hence...

To view recordings(podcasts) of all kinds of interesting demos and interviews direct from TechEd USA click here Thanks to Paul Fallon's post for providing the URL of the site listed above. As Mike Hall explains "A podcast is an audio or video file...

The easiest way to lock your screen on Windows XP is to press the Windows key(often known as the "flag key") followed by L - it's exactly the same as Control-Alt-Delete and clicking on the "Lock" button just with fewer steps. Thanks to Jayne from the...

Shawn posted an interesting article along these lines which is accessible here Browse to http://www.microsoft.com/msa to download free blueprint guidance for building a wide range of data centre scenarios. MSA stands for Microsoft Systems Architecture...

There's some great advice in the comments to my recent post about Malware - thanks to everyone who contributed. If you would like to learn from your peers in the community then please take a look at the comments by clicking here . If you'd like to contribute...

If you're struggling to get the balance right between the enhanced security gained by enabling the firewall whilst maintaining the productivity of your systems then I recommend reading Michael Howard's recent post - click here to read the details. Michael...

There's good article here which advocates the best advice when it comes to dealing with Malware - "don't get it in the first place!". I accept that most users need a little more help than simply being told that. Adam and Charles(authors of the post) understand...

There are a couple of sessions at TechEd which will go into detail on practical steps you can take to reduce the risk of Malware in your environment. I'm joining Tony on the Chalk and Talk sessions and hence look forward to discussing how to deal with...

Ben Metcalf's post about the London Geek Dinner raised some interesting points which were a topic of conversation during the evening. Let me quote Ben for a moment... "Robert Scoble was interesting to talk to, and we exchanged numerous notes about...

Several of you have sent me email complaining that you were unable to post comments to my blog - my apologies but I had a configuration problem in my blog set up - thanks to Eileen for helping me fix the problem. For me the beauty of blogging is that...

Jeffery Palermo has posted a nice summary of the myths Steve and Jesper dispelled @ TechEd USA. Like many of you I was unable to be there in person though I am going to TechEd Europe in July and look forward to hearing the session for myself. Jeffery...

I enjoyed speaking on a panel today at the TIF conference. - full details of TIF can be found on their website . The audience comprised representatives from many high profile companies together with members of the press. The entire conference took...

Thanks to those of you who joined us at the Technical roadshow yesterday in London. I enjoyed meeting members of the community and listening to the challenges many of you face. It's very easy to sit down in a room and pontificate about how to design a...

The Chatham House Rule is used by convention in many security meetings held in the UK. I blogged about this yesterday but upon reflection I don't think the title I used was very helpful - to read the post click here

There's a wealth of practical information on this topic at http://www.microsoft.com/wifi including build guides and best practises. Microsoft in the UK have one of the largest secure wireless networks in the country - serving 2000 users. The previous...

There are some vivid reminders of how important security awareness is to everyone at the Native Intelligence website - a series of posters are available showing cartoons of what not to do. I showed some of the posters at today's technical roadshow in...

In case you're not familiar with the Security Configuration Wizard(SCW) it's a great tool that's shipped with Service Pack 1 for Windows Server 2003. You can read all about it here . SCW ships with schema definitions for fifty applications - mainly Microsoft...

H.Carvey has an excellent Blog which is titled "Windows Incident Response" and as such is packed full of interesting content detailing the trials and tribulations associated with effective incident response. There's a nice summary post here which looks...