News

 

Security

 

What's New in Internet Explorer 8 (IE8) Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078948&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

By Gina Narkunas, Director – IE8 Product Marketing, Microsoft Corporation Gain insight into the rapid evolution of Web-based threats and learn more about how the new security and privacy protections in Internet Explorer 8 can benefit your organization.

 

Evaluate Microsoft Codename “Geneva” Beta 2 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078949&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Codename “Geneva” Beta 2 is an open platform that provides simplified user access and single sign-on for on-premises and cloud-based applications in the enterprise, across organizations and on the Web. Download Beta 2 today and learn more about “Geneva” at www.microsoft.com/geneva http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078884&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

 

The Id Element - Your One-Stop Shop for All Things Identity on Channel9 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078950&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Find out what you want to know about identity and access control. From weekly interviews with product team members and developer how-tos to news and key resources, this new site offers content for identity experts and those just getting started. Don’t forget to also download the Identity Developer Training Kit http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078885&s1=68628015-2ccc-cbc7-31b9-0e76c3415474   

 

Security Features in Microsoft Online Services http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078951&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn about the Business Productivity Online Suite—a set of subscription-based enterprise software services that operate within a complete ecosystem of features and capabilities designed to meet and in many cases to exceed the security and availability goals that you have for your business applications.

 

Microsoft Security Bulletin Summary for June, 2009

http://www.microsoft.com/technet/security/bulletin/ms09-jun.mspx 

 

Integrate and Extend Security Across the Enterprise with Microsoft “Geneva” (Evaluate Beta 2) http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12041163&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

With Geneva and Active Directory federation technologies, enterprises can more efficiently deploy and manage new applications, establish a consistent security model to consolidate access management, and facilitate easy collaboration between organizations.

Download the Forefront Client Security TCO Analysis http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12041164&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Find out how Microsoft Forefront Client Security can help you reduce vulnerabilities and lower total cost of ownership. Download the datasheet on Forefront Online Security for Exchange. http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12041090&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

 

Information Rights Management Application Patterns White Paper http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12114809&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This white paper provides architecture and design guidance for building an information rights management (IRM)-aware application using Microsoft Active Directory Rights Management Services. The IRM Application Patterns Reference Implementation, available on MSDN, implements the patterns discussed within this article. http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12114726&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

 

Microsoft Internet Security and Acceleration Server

 

Forefront Edge Security TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

 

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

 

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

 

Intelligent Application Gateway 2007

 

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

 

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

 

Intelligent Application Gateway Product Team Blog

The IAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

 

Documents

 

What's New in Client Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078952&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Get a quick overview of new security features in Windows 7, and changes to security features and technologies from Windows Vista.

 

BitLocker Drive Encryption Deployment Guide for Windows 7 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078953&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Delve deep into the various aspects of deploying BitLocker Drive Encryption on computers running Windows 7 Enterprise or Windows 7 Ultimate from using certifications and smart cards to enabling BitLocker by using the command line.

 

BitLocker Drive Encryption Step-by-Step Guide for Windows 7 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078954&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Designed to help you become familiar with BitLocker Drive Encryption in a Windows 7 test environment, this guide details basic information and procedures you need to start configuring and deploying BitLocker in your organization.

 

Implementing and Administering the ActiveX Installer Service in Windows 7 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078955&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn how to use the ActiveX Installer Service to manage the deployment of ActiveX controls by using Group Policy on computers in an organization.

 

AppLocker Step-by-Step Guide http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078956&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This step-by-step guide is designed to help administrators become familiar with AppLocker by providing the instructions needed to set up AppLocker in a test lab environment. Each scenario provides basic information and procedures that administrators can use to start configuring and deploying AppLocker in their network environments.

 

How to Turn Off Security Messages and Other System Notifications in Windows 7 http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078957&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Windows 7 gives you more control over the Security Messages and other Notifications you may or may not want to receive. Learn how, for starters, you can configure how notifications are handled on the Taskbar—choosing to hide certain types of notifications, such as Action Center messages, Network messages, Windows Update Automatic Updates messages, and so on.

 

Slipstreaming a Forefront Client Security Client Installation http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078958&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn how to slipstream a Forefront Client Security engine update into your System Center Configuration Manager (SCCM) or script-based initial Client Security client deployment, so that you are deploying the most up to date engine.

 

Internet Explorer 8 Enhanced Security Configuration http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078959&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Internet Explorer Enhanced Security Configuration places your server and Internet Explorer in a configuration that decreases the exposure of your server to potential attacks that can occur through Web content and application scripts. Learn more about this configuration and browser security best practices.

 

Downloads

 

Update for Root Certificates [May 2009] (KB931125)

This item updates the list of root certificates on your computer to the list that is accepted by Microsoft as part of the Microsoft Root Certificate Program.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f814ec0e-ee7e-435e-99f8-20b44d4531b0

 

Security Features in Microsoft Online Services

This white paper describes how the Microsoft concern for security, as defined in the Trustworthy Computing initiative, has driven key features in the design, deployment, and operation of the Microsoft Online Services environment.

The Business Productivity Online Suite is a set of subscription-based enterprise software services hosted by Microsoft and sold with partners. The services operate within a complete ecosystem of features and capabilities designed to meet and in many cases to exceed the security and availability goals that you have for your business applications.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5736aaac-994c-4410-b7ce-bdea505a3413

 

Increasing Your Organization’s Security and Privacy with Internet Explorer 8

Guidance for Enhancing Internet Explorer Security for Desktop Users

Learn about the emerging threat types on the web today and how Internet Explorer 8’s new security features help protect against them.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=198d40a4-6896-49b3-b8f2-c151e9797634

 

Hotfixes and Security Updates in Windows Server 2008 SP2 and Windows Vista SP2

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=4e478e21-3d31-4a10-b8ed-e1bb770e3212

 

Forefront Online Security for Exchange (FOSE) 9.1 Product Documents

Product documents for FOSE 9.1 include the following: New Features Guide, Administration Center User Guide, Directory Synchronization Tool Administration Guide, Customer Quick Cards and Forefront Online Security for Exchange Filtering Service Launch and Best Practices

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9c34eba6-059b-455a-a44f-96b1b06b4b21

 

Microsoft Directory Synchronization Tool 9.1

May 2009

The Microsoft Directory Synchronization Tool 9.1 enables you to securely synchronize selected data between an on-premise Active Directory and the Forefront Online Security for Exchange (FOSE) and Exchange Hosted Archive (EHA) services.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=3cda6dcc-1124-4e0b-b991-de9d85ed12e1

 

Update for Windows Mail Junk E-mail Filter [June 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69

 

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB970011)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=df364c4f-eb47-4df1-b51b-dbe2b539b379

 

Security Features in Microsoft Online Services

This white paper describes how the Microsoft concern for security, as defined in the Trustworthy Computing initiative, has driven key features in the design, deployment, and operation of the Microsoft Online Services environment.

The Business Productivity Online Suite is a set of subscription-based enterprise software services hosted by Microsoft and sold with partners. The services operate within a complete ecosystem of features and capabilities designed to meet and in many cases to exceed the security and availability goals that you have for your business applications.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5736aaac-994c-4410-b7ce-bdea505a3413

 

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB970012)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2007 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c8d0f17b-bdcc-4378-b518-0023c03e4e70

 

June 2009 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on June 9th, 2009.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d81a8c5e-ca61-473f-bdf7-5bb3b3169d16

 

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=585d2bde-367f-495e-94e7-6349f4effc74

 

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

 

System Center Operations Manager 2007 R2 SCW Roles and Security Hardening Guide for Windows Server 2008

The Operations Manager 2007 R2 SCW Roles and Hardening guide help protect and harden your Operations Manager 2007 R2 environment

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c22c81eb-c6dc-4190-a4c9-2edbf5b528f1

 

SQL Server 2008 Security DataSheet

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=65c2a014-5cbc-424e-ad5d-8d1da0bf6f58

 

Extended Security Update Inventory Tool

The Extended Security Update Inventory Tool is used to detect security bulletins not covered by MBSA including MS04-028, February 2005 bulletins, and future security bulletins that are exceptions to MBSA.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b

 

Forefront Threat Management Gateway Beta 3

Forefront Threat Management Gateway (TMG) is a comprehensive Secure Web Gateway solution that helps protect employees from Web-based threats. It also delivers simple, unified perimeter security with integrated firewall, VPN, intrusion prevention, malware inspection and URL filtering. Forefront TMG Beta3 is available for download in both Standard Edition and Enterprise Edition.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e05aecbc-d0eb-4e0f-a5db-8f236995bccd

 

IT Infrastructure Threat Modeling Guide

This Solution Accelerator provides you with a method to develop IT infrastructure threat modeling processes for your environment and prioritize your IT infrastructure security investments. The guide describes and considers the existing Microsoft Security Development Lifecycle (SDL) threat modeling process and uses it to establish a threat modeling process for IT infrastructure.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e1d53e3f-a512-4668-85b3-169a777fc58f

 

Microsoft Forefront Codename "Stirling" Beta Privacy Statement

This document describes the privacy policy for Microsoft® Forefront Client Security

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d34c6d9c-a555-4432-bb32-af21f5a6feab

 

Hotfix and Security Update List: Windows Server 2008 SP2 and Windows Vista SP2

Hotfixes and Security Updates in Windows Server 2008 SP2 and Windows Vista SP2

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d8b2cf4b-a2df-4664-8dd8-e840001e33f3

 

Events/WebCasts 

 

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910 

Find security webcasts listed in an easy-to-use calendar format.

 

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx 

 

Register for the following Webcasts on the link above

 

TechNet Webcast: Information About Microsoft July Security Bulletins (Level 200)

Wednesday, July 15, 2009 11:00 A.M.-12:30 P.M. Pacific Time

 

TechNet Webcast: Windows 7 Enhanced Security and Control (Level 300)

Wednesday, July 15, 2009 10:00 A.M.-11:00 A.M. Pacific Time

 

TechNet Webcast: Protecting Your Data with Windows 7 BitLocker and BitLocker To Go (Level 300)

Wednesday, July 29, 2009 10:00 A.M.-11:00 A.M. Pacific Time

 

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx  

 

Security Awareness Materials http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524381&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Guidance, samples, and templates for creating a security-awareness program in your organization.

 

Learn Security On the Job http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524382&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

 

Learning Paths for Security - Microsoft Training References and Resources http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=11524383&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

 

Visit TechNet Spotlight: www.microsoft.com/technetspotlight   

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

 

A.O.B

 

MVP Article of the Month: Securing the Client Infrastructure http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12078962&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn about some of the keys to keeping clients safe in this article by Microsoft Enterprise Security MVP Deb Shinder—proper configuration settings, secure application development, and the deployment of the appropriate security mechanisms based on how and where the client computer is used.