News

Introducing the Microsoft Security Update Guide http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486253&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Better understand how to use Microsoft security release information, processes, tools, and communications to help manage organizational risk and develop a repeatable, effective deployment mechanism for security updates. In this guide, you will find a convenient glossary of terms, an overview of the Microsoft Security Bulletin process, and a stage-by-stage review of Microsoft Security Updates.

Download the Microsoft Forefront Protection 2010 for Exchange Server Release Candidate http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486254&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This next-generation version of Forefront Security for Exchange Server provides fast and effective detection of malware and spam, blocks out-of-policy content, and integrates with Microsoft Forefront Online Protection for Exchange to offer the defense-in-depth benefits of hosted and on-premises filtering in a single solution.

Windows Server Update Services 3.0 SP2 RTM Now Available http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486255&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

WSUS 3.0 SP2 supports the latest operating systems, including Windows Server 2008 R2 and Windows 7 clients. WSUS 3.0 SP2 is more robust and features significant improvements in client performance, reliability, and increased server usability.

Download a 90-Day Trial of Windows 7 Enterprise http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486256&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Brought to you by the Springboard Series, a 90-day trial is now available to help you test and evaluate the RTM version of Windows 7 Enterprise. Designed specifically for IT professionals, this 90-day trial is offered in English, French, German, Japanese, and Spanish. (Note: If you already have Windows 7 through MSDN, TechNet, or Software Assurance, you do not need to download this trial.)

Microsoft Security Essentials provides real-time protection for your home PC that guards against viruses, spyware, and other malicious software. http://www.microsoft.com/security_essentials

Microsoft Security Essentials is a free* download from Microsoft that is simple to install, easy to use, and always kept up to date so you can be assured your PC is protected by the latest technology. It’s easy to tell if your PC is secure — when you’re green, you’re good. It’s that simple. *Your PC must run genuine Windows to install Microsoft Security Essentials.

Windows Server 2008: Granular Password Setting http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12444171&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Security Bulletin Summary for September, 2009

http://www.microsoft.com/technet/security/bulletin/ms09-sep.mspx

Microsoft Product Lifecycle Information

Find information about your particular products on the Microsoft Product Lifecycle http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355452&s1=68628015-2ccc-cbc7-31b9-0e76c3415474 Web site.

See a list of supported service packs http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12355453&s1=68628015-2ccc-cbc7-31b9-0e76c3415474: Microsoft provides free software updates for security and non-security issues for all supported service packs

Forefront Edge Security

Download Microsoft Forefront Unified Access Gateway Release Candidate 0 today
Forefront Unified Access Gateway (UAG) provides an easy and secure remote access solution with a focus on application intelligence and granular access control. Forefront UAG is the one solution to fit all of your remote access needs, as it provides centralized management and policy control across all users, devices, and network resources. When you download the latest software, you're automatically registered to access valuable resources assembled in one convenient location.

http://technet.microsoft.com/evalcenter/dd183100.aspx

Forefront TMG and ISA Server

Forefront Edge Security TechCenter

http://technet.microsoft.com/en-gb/forefront/edgesecurity/default.aspx

Please note that if you have feedback on documentation or wish to request new documents - email isadocs@microsoft.com

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront TMG (ISA Server) Product Team Blog

The ISA Server Product Team Blog (http://blogs.technet.com/isablog/) is updated on a regular basis. Latest entries include:

Time Matters - When ISA Server is affected by Windows Time settings

http://blogs.technet.com/isablog/archive/2009/09/03/time-matters-when-isa-server-is-affected-by-windows-time-settings.aspx

Web Publishing Test Button and KCD in TMG

http://blogs.technet.com/isablog/archive/2009/09/07/web-publishing-test-button-and-kcd-in-tmg.aspx

Change Tracking in TMG

http://blogs.technet.com/isablog/archive/2009/09/07/change-tracking-in-tmg.aspx

TMG Network Inspection System (NIS) – “Attention Required” Feature

http://blogs.technet.com/isablog/archive/2009/09/07/tmg-network-inspection-system-nis-attention-required-feature.aspx

Behavioral Change on IE7 can affect Outbound access through ISA Server 2006 that is using Redirect on a Deny Rule

http://blogs.technet.com/isablog/archive/2009/09/09/behavioral-change-on-ie7-can-affect-outbound-access-through-isa-server-2006-that-is-using-redirect-on-a-deny-rule.aspx

Forefront TMG Network Inspection System Gets Its First 0-Day Signature Release

http://blogs.technet.com/isablog/archive/2009/09/10/forefront-tmg-network-inspection-system-gets-its-first-0-day-signature-release.aspx

The Road to RC Needs Telemetry

http://blogs.technet.com/isablog/archive/2009/09/14/the-road-to-rc-needs-telemetry.aspx

ISA CSS and Arrays in a Nutshell

http://blogs.technet.com/isablog/archive/2009/09/15/isa-css-and-arrays-in-a-nutshell.aspx

Forefront TMG User Experience: UI Improvements

http://blogs.technet.com/isablog/archive/2009/09/22/forefront-tmg-user-experience-ui-improvements.aspx

Forefront TMG and Windows® 7 DirectAccess

http://blogs.technet.com/isablog/archive/2009/09/23/forefront-tmg-and-windows-7-directaccess.aspx

Forefront TMG User Experience: The Navigation Tree

http://blogs.technet.com/isablog/archive/2009/09/24/forefront-tmg-user-experience-the-navigation-tree.aspx

The Momentum is Building for TMG RTM

http://blogs.technet.com/isablog/archive/2009/09/27/the-momentum-is-building-for-tmg-rtm.aspx

Forefront Unified Access Gateway & Intelligent Application Gateway 2007

Intelligent Application Gateway 2007 Technical Resources

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687299.aspx

Forefront Edge Security Community

http://technet.microsoft.com/en-gb/forefront/edgesecurity/bb687298.aspx

Forefront Unified Access Gateway Product Team Blog

The UAG Product Team Blog (http://blogs.technet.com/edgeaccessblog) is updated on a regular basis. Latest entries include:

Deep Dive Into DirectAccess – NAT64 and DNS64 In Action

http://blogs.technet.com/edgeaccessblog/archive/2009/09/08/deep-dive-into-directaccess-nat64-and-dns64-in-action.aspx

Forefront UAG RC0 is on its way…

http://blogs.technet.com/edgeaccessblog/archive/2009/09/22/forefront-uag-rc0-is-on-its-way.aspx

Forefront UAG Release Candidate 0 (RC0) is here!

http://blogs.technet.com/edgeaccessblog/archive/2009/09/25/forefront-uag-release-candidate-0-rc0-is-here.aspx

Documents

Security Compliance Management Toolkit Series http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486257&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

This toolkit series provides an end-to-end solution to help your organization plan, deploy, and monitor security baselines of Windows operating systems and 2007 Microsoft Office applications.

How to Use the Microsoft Security Response Center Exploitability Index http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486258&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Microsoft Exploitability Index <http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486193&s1=68628015-2ccc-cbc7-31b9-0e76c3415474> makes an assessment on the likelihood that code will be released that exploits the vulnerability or vulnerabilities addressed in a security bulletin within the first 30 days after that bulletin’s release. Learn how to take advantage of this tool in your organization.

Implementing Patch Management to Improve Web Application Security http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486259&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learn how to keep single or multiple servers up to date, and improve your knowledge of the processes required to create a sound patch management system.

Deploying FCS Definition Updates with a Shared System Center Configuration Manager WSUS Infrastructure http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486260&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Microsoft Forefront Client Security uses the WSUS engine to deploy definition updates to all the clients that Forefront Client Security manages. Microsoft System Center Configuration Manager 2007 uses WSUS to provide metadata to the scanning engine on Configuration Manager clients that facilitate software updates. This document provides guidance on how to configure Forefront Client Security definition updates to use an existing Configuration Manager WSUS infrastructure while ensuring that Configuration Manager and Forefront Client Security function properly and work together in harmony.

How Do I: Change Default Work Items in the SDL Process Template? http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486261&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

The Security Development Lifecycle (SDL) Process Template was developed to ease the integration of security into the software development process. This four-minute video will show you how to modify the default work items that are created in your new SDL Process Template team project, and how to modify the default work item types, such as Task or Bug.

Downloads

KMS Setup in Windows 7

Learn how to set up the KMS host on Windows® 7 and Windows Server 2008 R2 computer, activate KMS clients with the KMS host, and review activation status.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=fda49c1f-475e-42d0-92ae-6f7edb802f3e

Troubleshooting activation

Understand volume activation in windows vista and windows server 2008, learn how to troubleshoot volume activation.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=78fcf22e-b243-4ee1-bc42-9110feae8b82

Best Practices in Planning for and Deploying Volume Activation

View this webcast to learn about the best practices for integrating Volume Activation into your enterprise deployment and management efforts. Read about lessons learned from dealing with license activation in a variety of environments, including networked, isolated, roaming, branch office, development, and test.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e8d137dc-2fdb-4bf9-a3b9-fc079e4b4609

Understanding Activation and Validation in Windows 7 and Windows Server 2008 R2

Learn how volume activation supports new types of license keys and several new modes of activation for customers in Windows 7 and Windows Server 2008 R2.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e0525726-fe17-45bf-8b3a-04c30fcfdd6c

VAMT 1.2 Reporting

Using VAMT to customize reports, troubleshoot and help manage volume activated systems

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7871cfbc-ddbd-4ad9-8616-c3ca3a9c7b46

Top 5 Product Key Activation Challenges IT Pro Encountered and Solved

Windows Vista® and Windows Server® 2008 include some significant changes relating to product activation over Windows® XP and Windows Server 2003. These changes, while simple, often caused concerns and operational challenges for IT Pros in deploying Windows.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=8300a9c7-48c0-4ca8-9f1e-91d8ce02abd8

VAMT 1.2 MAK Activation

MAK independent proxy and Confirmation ID activation using VAMT

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2b6c36ef-06db-4dd5-a216-5ec057e29fd6

Top 10 Things You Should Know About Genuine Windows

Microsoft is educating customers and partners on Genuine software, in effort to protect them from counterfeit and pirated software. Are you familiar with the concepts of 'Genuine Windows' or 'Genuine Microsoft Software'? Learn more about what it means to become 'Genuine' and get an overview of product activation, validation, licensing and compliance.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=f6990722-9943-459b-9a73-aea9369251b6

VAMT 1.2 Overview

VAMT 1.2 features and capabilities

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b66798b8-6b4e-45f6-a16c-0a8c1e60f0c6

VAMT 1.2 Firewall Setup

Configuring Windows client firewall to allow volume activation management tool (VAMT) access

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c73fe063-c9d7-4bfe-aab1-ef475834610f

Volume Activation Operations Guide Windows 7

Get operational guidance around management tools, troubleshooting, recovering from unlicensed states, resolving non-genuine software issues, and managing each method of Volume Activation.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=83279f06-79b0-404e-addd-2473567c126e

Volume Activation in Disconnected Environment Guide Windows 7

This guide is for IT pros maintaining the Windows® 7 and Windows Server® 2008 R2 operating systems in disconnected environments. It describes activation techniques for operating systems in environments with no Internet connectivity

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=6e6c2553-e3da-4bd4-bef3-ffcd80e7cc56

Notifications Experience in Windows 7 for End Users

Learn about Windows activation notifications experience in Windows 7 and Windows Server 2008 R2 for enterprise customers and ways to resolve them.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=26617560-7d12-4f7e-a7b9-a78c3e582d18

Windows 7 Improvements in Volume Activation Datasheet

Learn about the latest improvements in volume activation in Windows ® 7, including enhanced user experience, improved efficiency and activation process as part of deployment.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d3956d05-8666-42db-87a5-6883953059a1

Product Activation in Development Environment in Windows 7

This guide is for IT pros maintaining the Windows® 7 and Windows Server® 2008 R2 operating systems in disconnected environments. It describes activation techniques for operating systems in environments with no Internet connectivity.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=737aa964-f6f5-43bd-94e7-4d9cae674537

Top 7 Things You Need to Know About Activation BDM

Two page overview guide on top 7 things you need to know about volume activation in Windows 7 for business decision makers.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=e096ef67-752e-40df-8a26-766a70d2b5cb

Activation Technologies in Windows 7 Overview Guide

This document outlines the activation and validation experience in Windows 7 and provides more information for customers interested in learning about activation, validation, and genuine Windows.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7c7ffab9-c63b-4ae2-8315-937d2b60d2c5

Volume Activation Planning Guide Windows 7

Learn how incorporate activation in your deployment plans for Windows 7 and Windows Server 2008 R2—as well as Windows Vista and Windows Server 2008.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=730dc152-bf13-4cce-80a2-c3bff60b4cbd

Volume Activation Changes for Service Pack 2 for Windows Vista and Windows Server 2008

This document summarizes the changes to Volume Activation implemented in Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2 (SP2).

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2bcbeaa2-bc7a-41bd-a3fd-5f12fd6c5dc1

Volume Activation Deployment Guide Windows 7

Use this guide to systemically deploy Volume Activation, including establishing a KMS host or using MAK within your environment.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=bf11bbf3-5e2e-4f6b-aa39-965af07751c1

Microsoft Hosted Volume Activation Guide in Windows 7

Microsoft® Volume Activation helps Volume Licensing customers automate and manage the activation process of Volume Licensing media. Volume Licensing customers and special program subscribers such as the Microsoft Partner Program, MSDN®, and Microsoft TechNet are eligible for Volume Licensing software and media.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad86d693-d4fb-4d5a-af1a-4199fd31b3a7

Fundamentals of Volume Activation in Windows 7

Watch this 5-minute demo to get insight into the Volume Activation process while deploying Windows 7 and Windows Server 2008.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b7ddf8ba-2f36-43f3-b153-8ed786fcb3c7

Activating with MAK in Windows 7

Learn how to deploy Windows using a Multiple Activation Key (MAK) process.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9bfb69ab-d5f7-4fa1-be6c-b81c550db45d

Activating with KMS in Windows 7

Learn how to deploy Windows with a Key Management Service (KMS) process.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=be688342-4f8a-4a15-bfa6-33b0d73c6a59

IT Pro at Home Demonstration: Security On Your Terms

Part of the Springboard Series IT Pro at Home: Tips and Tricks series, this screencast demonstrates the security changes in Windows 7.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=cc112f49-4afc-4447-b2be-ff0121018c36

Microsoft Online Services Sign In

Use this Sign In application to access Microsoft Online Services.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5c2ca866-4107-4ae5-98d5-76bf1b18ff87

Cross-forest Certificate Enrollment with Windows Server 2008 R2.doc

This paper explains how cross-forest certificate enrollment works. It also provides deployment guidance for cross-forest certificate enrollment in new and existing Active Directory Certificate Services (AD CS) deployments.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d408be72-7c74-4b19-a2de-fa11858c30b2

Security on Your Terms Walkthrough

Provides a brief tour of new security features in Windows 7.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=def39f0f-695f-4c27-b912-15c2d5a0367f

Security Frequently Asked Questions

Answers questions about security in Windows 7.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=cde8ceac-ccef-4d72-8dc7-fe8e39306e79

Security on Your Terms

Describes some of the new or changed security features in Windows 7.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=1bfd698a-0c45-4348-a80b-0ca02becf84b

Group Policy Settings References for Windows and Windows Server

These spreadsheets list the policy settings for computer and user configurations included in the Administrative template files delivered with the Windows operating systems specified. You can configure these policy settings when you edit Group Policy objects (GPOs).

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=18c90c80-8b0a-4906-a4f5-ff24cc2030fb

Update for Microsoft Office Outlook 2003 Junk Email Filter (KB973515)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2003 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=63bf0d12-165b-4fee-ac96-9bad91ddb264

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB973514)

This update provides the Junk E-mail Filter in Microsoft Office Outlook 2007 with a more current definition of which e-mail messages should be considered junk e-mail.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=1586dc82-3422-4801-874b-e6c38868945c

Feature Pack 1 for Windows Essential Business Server 2008 (KB973236)

This Feature Pack adds a feature that you can use to adjust the security settings in Forefront Threat Management Gateway (TMG) in Windows Essential Business Server (EBS). The feature helps you manage Forefront TMG and diagnose firewall issues.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=40274ca7-9f0d-4152-b090-3980442e7222

Geneva Interop Whitepapers

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9eb1f3c7-84da-40eb-b9aa-44724c98e026

Microsoft Forefront Security for Office Communications Server Best Practices Analyzer

The Forefront Security for Office Communications Server (FSOCS) Best Practices Analyzer compares your existing FSOCS deployment against recommended best practices to identify configuration setting changes that could help you improve FSOCS performance and malware detection rates.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=62f9fb8e-1f08-4a94-b21b-9cc7fe4550de

Microsoft® Forefront™ codename "Stirling" VHDs

An integrated security system that is easier to manage and control

Forefront codename “Stirling” is an integrated security suite. This download comes as pre-configured VHDs. This download enables you to evaluate Microsoft Forefront Codename "Stirling". It includes Forefront Client Security, Forefront Security for Exchange Server, Forefront Security for Sharepoint Server, The Central Management Server and Threat Management Gateway.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d4c3410f-11f0-42b8-9da7-b826d243536b

Security Features in Microsoft Online Services

The Business Productivity Online Suite is a set of subscription-based enterprise software services hosted by Microsoft and sold with partners. The services operate within a complete ecosystem of features and capabilities designed to meet and in many cases to exceed the security and availability goals that you have for your business applications.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5736aaac-994c-4410-b7ce-bdea505a3413

Update for Windows Mail Junk E-mail Filter [September 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=aa029fde-f341-44fc-8b85-0c6f3d3c2d69

Update for Windows Mail Junk E-mail Filter for x64-based Systems [September 2009] (KB905866)

Install this update for Windows Mail to revise the definition files that are used to detect e-mail messages that should be considered junk e-mail or that may contain phishing content.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=749e10cd-f40c-4f94-8e38-d4221ded7652

Microsoft® Windows® Malicious Software Removal Tool (KB890830)

This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356

Microsoft® Windows® Malicious Software Removal Tool (KB890830) x64

This tool checks your computer for infection by specific, prevalent malicious software (including Blaster, Sasser, and Mydoom) and helps to remove the infection if it is found. Microsoft will release an updated version of this tool on the second Tuesday of each month.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=585d2bde-367f-495e-94e7-6349f4effc74

September 2009 Security Release ISO Image

This DVD5 ISO image file contains the security updates for Windows released on Windows Update on September 8th, 2009.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=fab6b8f8-b766-4146-b86d-0953d19d95ab

Microsoft Global Security Showcase: Physical Security at Microsoft

Microsoft Global Security Showcase: Physical Security at Microsoft. Taking Advantage of Strategic IT Convergence. Technical White Paper

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=95384b9d-8ec0-4dfb-96a9-7a61c2f81888

Extended Security Update Inventory Tool

The Extended Security Update Inventory Tool is used to detect security bulletins not covered by MBSA including MS04-028, February 2005 bulletins, and future security bulletins that are exceptions to MBSA.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b

Security and Authentication in Microsoft Dynamics CRM: The Microsoft Dynamics CRM Security Model

This white paper, The Microsoft Dynamics CRM Security Model, serves as the core architectural component of a larger "nuts and bolts" article on Security and Authentication in Microsoft Dynamics CRM 4.0.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=fb4bb16b-586f-4aae-aa4b-790023e95b61

Certificate Enrollment Web Services in Windows Server 2008 R2

This paper explains how certificate enrollment Web services work in Windows Server 2008 R2. It also provides deployment guidance for certificate enrollment Web services in new and existing Active Directory Certificate Services (AD CS) deployments.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=28b910f8-6374-48dd-a897-11fff62ab795

Forefront Online Security for Exchange (FOSE) 9.1 Product Documents

Product documents for FOSE 9.1 include the following: New Features Guide, Administration Center User Guide, Directory Synchronization Tool Administration Guide, Customer Quick Cards and Forefront Online Security for Exchange Filtering Service Launch and Best Practices.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=9c34eba6-059b-455a-a44f-96b1b06b4b21

Antigen 8.1 Privacy Statement

This document describes the privacy policy for the 8.1 release of Antigen

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c5b708ec-68c5-468b-9877-f3919c831078

Microsoft Anti-Cross Site Scripting Library V3.1

AntiXSS 3.1 helps you to protect your current applications from cross-site scripting attacks, at the same time helping you to protect your legacy application with its Security Runtime Engine.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=051ee83c-5ccf-48ed-8463-02f56a6bfc09

Security Features in Microsoft Online Services

The Business Productivity Online Suite is a set of subscription-based enterprise software services hosted by Microsoft and sold with partners. The services operate within a complete ecosystem of features and capabilities designed to meet and in many cases to exceed the security and availability goals that you have for your business applications.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=5736aaac-994c-4410-b7ce-bdea505a3413

Advanced Group Policy Management 2.5 Documents

These guides provide step-by-step guidance for installing Microsoft Advanced Group Policy Management (AGPM) 2.5 and managing Group Policy objects (GPOs) by using AGPM 2.5

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ba69e774-f0d1-4b6d-be81-a8c5f27d1b8a

Advanced Group Policy Management 4.0 Documents

These guides provide an overview of Advanced Group Policy Management (AGPM) 4.0 and step-by-step guidance for installing AGPM 4.0, managing Group Policy objects (GPOs) by using AGPM 4.0, and planning and deploying AGPM 4.0.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=58fd6cda-0210-4da0-91d2-8c3cc2817df8

Advanced Group Policy Management 3.0 Documents

These guides provide step-by-step guidance for installing Advanced Group Policy Management (AGPM) 3.0, managing Group Policy objects (GPOs) by using AGPM 3.0, and planning and deploying AGPM 3

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=80bb67f2-864c-4f4c-9f0d-a118ef607f1a

MiniFuzz File Fuzzer

MiniFuzz is a very simple fuzzer designed to ease adoption of fuzz testing by non-security people who are unfamiliar with file fuzzing tools or have never used them in their current software development processes.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b2307ca4-638f-4641-9946-dc0a5abe8513

BinScope Binary Analyzer

BinScope is a Microsoft verification tool that analyzes binaries on a project-wide level to ensure that they have been built in compliance with Microsoft’s Security Development Lifecycle (SDL) requirements and recommendations.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=90e6181c-5905-4799-826a-772eafd4440a

Whitepaper: Manual Integration of the SDL Process Template

This paper outlines the steps for manually extracting the key elements of the SDL Process Template and integrating them into an existing Team Project.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=639a3784-a6f4-4d47-9750-b79bd789ba58

BranchCache Security Guide

This document provides guidance to help organizations understand and manage the security of the Microsoft® BranchCache™ feature introduced in Microsoft Windows Server® 2008 R2 and Microsoft Windows® 7.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=449be4b1-5f87-47f1-945b-ccd4b196b34f

Microsoft Windows Key Management Service Management Pack for Operations Manager 2007

The KMS MP monitors core Key Management Service offered by Windows Server 2008 R2, Windows 7, Windows Server 2008, Windows Server 2003 and Vista

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=a330d876-c965-4433-afdf-7c61a9126fb3

Using the Autogen Annotator

Autogen is a patented technology uses to procedurally place default 3D objects throught a simulated world.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=30b16a77-1ce9-475e-8072-0748656e2513

Autogen Annotator Pictorial Reference

Autogen is a patented technology uses to procedurally place default 3D objects through a simulated world.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=0f6ab9ff-392f-46e4-a604-5a68078107bf

Active Directory Certificate Services Upgrade and Migration Guide for Windows Server 2008

This document discusses the planning and implementation of a Windows Server 2008 Active Directory Certificate Services (AD CS) upgrade and migration from an existing Windows public key infrastructure (PKI), including scenarios and step-by-step instruction.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c70bd7cd-9f03-484b-8c4b-279bc29a3413

Events/WebCasts

Microsoft SDL – Developer Starter Kit http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486214&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Awareness Materials http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486215&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Guidance, samples, and templates for creating a security-awareness program in your organization.

Learn Security On the Job http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486216&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Learning Paths for Security - Microsoft Training References and Resources http://co1piltwb.partners.extranet.microsoft.com/mcoeredir/mcoeredirect.aspx?linkId=12486217&s1=68628015-2ccc-cbc7-31b9-0e76c3415474

Security Webcast Calendar http://go.microsoft.com/fwlink/?LinkId=37910

Find security webcasts listed in an easy-to-use calendar format.

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: Design Considerations for Internal Public Key Infrastructures (Level 200)

Monday, October 05, 2009 10:00 A.M.-11:00 A.M. Pacific Time

TechNet Webcast: Connect Remotely Using Windows 7 Direct Access (Level 300)

Wednesday, October 07, 2009 10:00 A.M.-11:00 A.M. Pacific Time

TechNet Webcast: Announcing Data Protection Manager 2010 Beta (Level 300)

Thursday, October 08, 2009 9:00 A.M.-10:00 A.M. Pacific Time

IT Manager Webcast: Information Security Using HBI Information Classification and Automation (Level 200)

Thursday, October 08, 2009 11:00 A.M.-12:00 P.M. Pacific Time

TechNet Webcast: Microsoft Secure Endpoint Solution (Level 200)

Tuesday, October 13, 2009 12:00 P.M.-1:00 P.M. Pacific Time

TechNet Webcast: Information About Microsoft October Security Bulletins (Level 200)

Wednesday, October 14, 2009 11:00 A.M.-12:30 P.M. Pacific Time

TechNet Webcast: Microsoft Secure Collaboration Solution (Level 200)

Tuesday, October 27, 2009 1:00 P.M.-2:00 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

Visit TechNet Spotlight: www.microsoft.com/technetspotlight

Video on Demand, Video Downloads, PowerPoint Presentations, Audio and more

New or updated KB’s

Microsoft Internet Security and Acceleration Server

A memory leak occurs in the Wspsrv.exe process when you use the Negotiate (NTLM/Kerberos) delegation in ISA Server 2006

http://support.microsoft.com/kb/973731

Some Web servers do not recognize the "Accept-Encoding:gzip" header in the requests that are forwarded by ISA Server 2006

http://support.microsoft.com/kb/973732

ISA Server 2006 does not pass the last server cookie to the client computer when HTML form authentication is used in the Web-publishing rule

http://support.microsoft.com/kb/973737

Description of the ISA Server 2006 hotfix package: July 19, 2009

http://support.microsoft.com/kb/973738

ISA Server 2006 Management Console crashes when you click the Schedule tab of a firewall policy rule

http://support.microsoft.com/kb/973734

The users cannot change the password when they use ISA Server 2006 Forms-Based authentication in an active directory forest with multiple domain trees

http://support.microsoft.com/kb/974662

A user cannot send e-mail messages by using Outlook Web Access server that is published by ISA Server 2006 when the delegation is set to NTLM

http://support.microsoft.com/kb/974663

Description of the ISA Server 2006 hotfix package: August 16, 2009

http://support.microsoft.com/kb/974665

Forefront TMG and ISA Server

Blank page or page cannot be displayed when you view SSL sites through ISA Server or Microsoft Forefront Threat Management Gateway, Medium Business Edition

http://support.microsoft.com/kb/283284