Security

News

 

Windows Vista Security and Data Protection Improvements
New features make Windows Vista even more secure than earlier Windows client operating systems

This paper describes the most significant security improvements in the next version of Windows, the benefits they provide, and why the new features matter to IT professionals.
http://www.microsoft.com/technet/windowsvista/evaluate/feat/secfeat.mspx

 

Selected Scenarios for Enhancing Security with Windows Vista
Find out what's new for security in Windows Vista. The benefits and impact of the new and changed features are discussed, and scenarios are included.

http://www.microsoft.com/technet/windowsvista/evaluate/admin/mngsec.mspx

 

802.1X on Wired Networks Considered Harmful -- By Steve Riley

There is a fundamental flaw in 802.1X when it is used on wired networks that seriously reduces its effectiveness at keeping out rogue machines. This article describes how an attack might take advantage of a weakness in the way the protocol is implemented. It also reviews how 802.1X operates.

http://go.microsoft.com/?linkid=3783127
 

Microsoft Security Guidance Center: Recently Published

http://www.microsoft.com/technet/security/recent/default.mspx

 

Microsoft Security Bulletin Summary for August, 2005

http://www.microsoft.com/technet/security/bulletin/ms05-aug.mspx

 

Security Tip of the Month: Security and Compliance Solutions Guidance http://go.microsoft.com/?linkid=3783133
A part of Microsoft's ongoing efforts to help the industry address current and emerging security issues, the Microsoft Security Solutions and Compliance (MSSC) team creates prescriptive guidance to help IT professionals stay one step ahead of security issues.

 

Top Stories


New Planning Guide: Implementing Quarantine Services with Microsoft Virtual Private Network http://go.microsoft.com/?linkid=3783128
Although a Virtual Private Network (VPN) provides secure access by encrypting data though the VPN tunnel, it does not prevent intrusions by malicious software, such as viruses or worms that initiate from the remote access computer. Virus or worm attacks can take place when infected computers connect to the LAN. This guide describes the challenges in planning and implementing quarantine services with VPN using the new features available in Microsoft Windows Server 2003 with Service Pack 1 (SP1).

 

Microsoft Phishing Filter White Paper http://go.microsoft.com/?linkid=3783129
This white paper describes the Microsoft Phishing Filter, a new feature included in the upcoming release of Internet Explorer 7. The Microsoft Phishing Filter helps provide consumers with a dynamic system of warning and protection against potential phishing attacks-. More importantly -- it also benefits legitimate ISPs and Web commerce site developers by helping them to ensure that their brands are not being "spoofed" to propagate scams and that their legitimate outreach to customers is not confusing or misinterpreted by filtering software.

 

Microsoft Security Overview for the Manufacturing Industry http://go.microsoft.com/?linkid=3783130
This white paper by the ARC Advisory Group looks at the security issues facing the manufacturing industry and how Microsoft is helping the industry confront this important problem.

 

Enterprise Rights Management Software Ensures that Sensitive Documents and E-Mail Don't End Up in the Wrong Hands http://go.microsoft.com/?linkid=3783131
In this article, published in the July 2005 issue of Computerworld, author Robert Mitchell explains what Enterprise Rights Management (ERM) software does, the difference between Digital Rights Management (DRM) and ERM, how ERM meets customer needs, and how Rights Management Services (RMS) fits into this space.

 

How the Windows Update Client Determines Which Proxy Server to Use to Connect to the Windows Update Web Site http://go.microsoft.com/?linkid=3783132
The Microsoft Windows Update client program requires Microsoft Windows HTTP Services (WinHTTP) to scan for available updates. This article describes the various proxy server detection methods that are available. It also describes the situations where Windows Update uses a particular proxy server detection method.

 

Security Guidance

 

Writing Secure Code with Visual Studio 2005 http://go.microsoft.com/?linkid=3783134
Learn about the fundamental design principles for building secure applications using various tools and techniques. See how Visual Studio 2005 uses technologies such as FxCop and Code Access Security to help create more secure managed code applications, while PREfast and the /GS switch can help secure your native code applications.

 

Security Resources for Midsize Business http://go.microsoft.com/?linkid=3783135
Microsoft offers a wide range of powerful tools and resources to help midsize businesses protect their systems and data. Find information about the latest security updates, recent incidents, and best practices.

 

Do You Want to Learn More About Windows Rights Management Services? http://go.microsoft.com/?linkid=3783136
Protect information using Microsoft Windows Rights Management Services (RMS) with Service Pack 1 (SP1) with the help of this virtual lab. In this lab, you will deploy the RMS server and client components, register the server in Active Directory, and then use the system to protect information in Microsoft Office Outlook 2003 Professional e-mail messages and Microsoft Word documents.

 

Get the Peace of Mind You Deserve with Genuine Microsoft Windows XP Software http://go.microsoft.com/?linkid=3783137
Genuine Microsoft Windows XP Professional gives you the confidence that your software will support you and your business. By providing software updates, training tools, and other enhancements, Microsoft can help you make your business successful. So the next time you buy a Windows-based PC, make sure you ask for genuine Windows XP Professional.

 

SQL Server 2000 Beats Oracle 10g on Security Vulnerability Issues http://go.microsoft.com/?linkid=3783138
Read how Microsoft SQL Server 2000 on Windows Server 2003 experienced 144 fewer security vulnerabilities versus Oracle 10g on Red Hat Enterprise Linux 3.0. Find Microsoft partners http://go.microsoft.com/?linkid=3783139 who can help your business extend the functionality and core capabilities of SQL Server 2000.

 

Note to Users with Expired Versions of Windows AntiSpyware (Beta) http://go.microsoft.com/?linkid=3783140
Did your copy of Windows AntiSpyware (Beta) expire? Download and upgrade to the latest version of Windows AntiSpyware (Beta) today for an extension. If you are unsure of the version or when your version of Windows AntiSpyware (Beta) will expire, you can follow these instructions on how to check the expiration date of your version of Windows AntiSpyware (Beta).

 

MVP Update
MVP of the Month: Paul Laudanski - Windows Security Paul Laudanski, a.k.a. Zhen-Xjell, has been a techno-geek since the 1970s. Laudanski's first genuine computer experience was with the Commodore-64 and a 300 Baud modem running a 24/7 colored ASCII BBS. In the 1980s he became involved in DOS and Windows. During the 1990s he obtained a Bachelor's degree in pure Mathematics and expanded his reach into PCBoard, Centipede, Ygdrasil, Fidonet, Unix, and Linux. These days Laudanski loves to hang out at CastleCops.com (which he founded in 2002), as well as other security-related lists and Web sites. His passions include programming, system hardening, security, and privacy. Paul and his wife (who is also a Microsoft MVP in Windows Security and wrote the MVP Article of the Month below) are proud parents of their first son.
Get more information about the MVP program here http://go.microsoft.com/?linkid=3783141.

 

Keeping your PC healthy and secure
Help protect your computer, yourself, and your family with the latest security tips and advice from Microsoft Security At Home <http://go.microsoft.com/?linkid=3712872>, including:

 

What to do if you're a victim of credit card fraud http://go.microsoft.com/?linkid=3712873
Beware of scams when job hunting online http://go.microsoft.com/?linkid=3712874

 

Other useful links:
Keep your PC up to date automatically http://go.microsoft.com/?linkid=3712875
3 steps to help protect your PC http://go.microsoft.com/?linkid=3712876
Windows Update http://go.microsoft.com/?linkid=3712877
Office Update http://go.microsoft.com/?linkid=3712878

 

Downloads

 

Managing Intra-Windows Compatibility for IPsec
http://www.microsoft.com/downloads/details.aspx?FamilyID=780f325f-9d4d-4346-8618-b31ba8b4bf3d&DisplayLang=en

 

Visio Connector for Microsoft Baseline Security Analyzer (MBSA)
http://www.microsoft.com/downloads/details.aspx?FamilyID=8ea27d78-32b5-4f37-a7fd-99ee2aa76c62&DisplayLang=en

 

Scenarios and Procedures for Microsoft Systems Management Server 2003: Security
http://www.microsoft.com/downloads/details.aspx?FamilyID=3d81b520-a203-4376-a72d-fd34a6c4a44c&DisplayLang=en
 
Microsoft® Windows® Malicious Software Removal Tool (KB890830)
http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

 

Understanding Security in Microsoft Internet Explorer 6 in Windows XP SP2
http://www.microsoft.com/downloads/details.aspx?FamilyID=e550f940-37a0-4541-b5e2-704ab386c3ed&DisplayLang=en

 

Internet Protocol Security for Microsoft Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyID=e6590330-d903-4bdd-9655-81b86df655e4&DisplayLang=en

 

Extended Security Update Inventory Tool
http://www.microsoft.com/downloads/details.aspx?FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b&DisplayLang=en

 

June 14, 2005 Enterprise Update Scan Tool v3 (standalone version)
http://www.microsoft.com/downloads/details.aspx?FamilyID=10214bed-acc0-475d-ba97-0def3bba1937&DisplayLang=en

 

Interoperability Considerations for IPsec Server and Domain Isolation
http://www.microsoft.com/downloads/details.aspx?FamilyID=10359569-ef11-499a-9e1f-85da3fca608c&DisplayLang=en

 

Introduction to Server and Domain Isolation with Microsoft Windows
http://www.microsoft.com/downloads/details.aspx?FamilyID=9a3e2b2b-695d-4ff9-bcb1-5f2f3001845e&DisplayLang=en
 
Server Isolation with Microsoft Windows Explained
http://www.microsoft.com/downloads/details.aspx?FamilyID=93bed81a-d073-4c2e-866f-e062dc2213b7&DisplayLang=en
 
Windows Server 2003 Internet Authentication Service (IAS) Operations Guide
http://www.microsoft.com/downloads/details.aspx?FamilyID=27c432bf-5ed0-4763-8909-36e7c310ae3c&DisplayLang=en
 
XP Embedded SP1 Security Update: Microsoft Security Bulletins MS05-004(887219, 887998), MS05-019(893066), MS05-025(883939), MS05-026(896358), MS05-027(896422), MS05-028(896426), and MS05-030(897715)
http://www.microsoft.com/downloads/details.aspx?FamilyID=951cd714-f96a-49d5-a71f-b0600f9ca855&DisplayLang=en
 
XP Embedded SP2 Security Update: Microsoft Security Bulletins MS05-004(887219, 887998), MS05-019(893066), MS05-025(883939), MS05-026(896358), and MS05-027(896422)
http://www.microsoft.com/downloads/details.aspx?FamilyID=ebe044a7-5586-449f-8001-660e01afcb27&DisplayLang=en
 
Configuring Internet Authentication Service for Network Access Protection (NAP) in Windows Server "Longhorn" Beta 1
http://www.microsoft.com/downloads/details.aspx?FamilyID=8e47649e-962c-42f8-9e6f-21c5ccdcf490&DisplayLang=en
 
Domain Isolation with Microsoft Windows Explained
http://www.microsoft.com/downloads/details.aspx?FamilyID=156c73a1-f9c2-41c7-b5c1-a509fb255447&DisplayLang=en
 
Update for Outlook 2003 Junk E-mail Filter (KB902953)
http://www.microsoft.com/downloads/details.aspx?FamilyID=7ba267bb-baa8-4682-8d73-b73cb5ba4a04&DisplayLang=en

 

Events

 

 · Hone Your Security Expertise with Microsoft E-Learning Clinics http://go.microsoft.com/?linkid=3563113
 · Applying Microsoft Security Guidance with Hands-On Labs http://go.microsoft.com/?linkid=3563114
 · Extend Your Skills: Use the Stand-alone Security Virtual Labs  http://go.microsoft.com/?linkid=3563115

 

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

 

Register for the following Webcast on the link above

 

TechNet Webcast: Implementing Security Patch Management (Level 200)
TechNet Webcast: How Microsoft IT Deployed Smart Cards for Securing Remote Access (Level 300)
TechNet Webcast: Rootkits in Windows (Level 300)
TechNet Webcast: Defense in Depth Against Malicious Software (Part 1 of 3): Malicious Software Defense and Recovery (Level 200)
TechNet Webcast: Defense in Depth Against Malicious Software (Part 2 of 3): Malicious Software Defense and Recovery (Level 200)
TechNet Webcast: Defense in Depth Against Malicious Software (Part 3 of 3): Malicious Software Defense and Recovery (Level 200)

 

There are many more Webcasts available

 

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

 

 Windows Platform

News

Windows Vista Beta 1 Available to MSDN Subscribers

Windows Vista introduces breakthroughs in user experience, security and reliability, enabling you to build applications that bring clarity to the user's complex world of information.

MSDN subscribers: Download Windows Vista Beta 1 and start testing your applications today.

http://msdn.microsoft.com/windowsvista/

 

WinFS beta 1 Ships!

It’s a big milestone shipping WinFS Beta1 and being able to reconnect with a broader set of developers on what we are building.  WinFS is alive and well, and with Beta1 we are anticipating lots of feedback to help us continue to refine WinFS.

http://blogs.msdn.com/winfs/

Here's the WinFS team talking about their beta 1 release.

http://channel9.msdn.com/ShowPost.aspx?PostID=106356#106356

 

Microsoft announces new Windows Server System Solution for Mid-sized Businesses

The new solution offering combines core technology components - Windows Server 2003 Std Edition, Exchange Server 2003 Std Edition and Microsoft Operations Manager (MOM) 2005 Workgroup Edition - and includes 50 new combination promotional Client Access Licenses (CALs) at approximately 20% less than current Open Licence programme prices.

http://www.microsoft.com/uk/business/wss-mediumbusiness.aspx

 

Help bring about the biggest revolution in database servers for years! 

The imminent arrival of SQL Server 2005 is creating quite a stir. It's been five years in development and its raft of revolutionary changes will propel SQL Server into a new era. So what's in this 'revolution' for you?

As an IT Professional, Microsoft want to bring you on board early while SQL Server 2005 is still at the pre-launch stage. So we've created a Community Preview Programme centred on a one-stop website where you can read independent assessments and order a copy of the latest SQL Server 2005 Community Technology Preview for a real 'hands-on' evaluation. The Community Preview Programme puts you at the heart of the movement and you'll be able to swap opinions about SQL Server 2005 with fellow IT Professionals around the UK in a dedicated Community newsgroup.

You'll also be able to watch topical blogcasts about detailed features, attend LoadFest events and qualify for a wide range of exclusive offers and discounts on training courses, subscriptions and events.

http://www.microsoft.com/uk/windowsserversystem/sql/2005/default.aspx

 

Downloads

 

Windows Server 2003 Performance Advisor Management Pack for Microsoft Operations Manager 2005

Microsoft Windows Server 2003 Performance Advisor (short name: Server Performance Advisor 2.0) is a simple but robust tool that helps you diagnose the root causes of performance problems in a Windows Server 2003 operating system deployment. Server Performance Advisor (SPA) 2.0 collects performance data and generates comprehensive diagnostic reports that give you the information you need to analyze problems and develop corrective actions.

This management pack is designed to help you collect distributed data and consolidate SPA 2.0 reports for centralized review. Features of the Management Pack are summarized as follows:

  • Comprehensive performance diagnosis reports which lead to corrective actions
  • Scheduled performance data collection
  • Distributed performance data collection
  • Rule-based initiation of performance data collection

The Management Pack for SPA 2.0 provides performance diagnosis for server roles, such as, AD, IIS, DNS, and Print spooler. Examples include:

  • Alerts indicating performance issues (e.g., responsiveness, resource usage, configuration) of certain server role or a general system
  • Events indicating tool issues (e.g., data collection failure, missing template data)
  • Automatic and distributed data collection

http://www.microsoft.com/downloads/details.aspx?FamilyID=82632729-3263-4254-9332-1f51815c55fb&DisplayLang=en

 

Update for Windows XP (KB886540)

Installation of the Media Pack will ensure that software programs and Web sites that rely on Windows files not included in Windows XP Home Edition N or Windows XP Professional N will work properly. After you install this update, you may need to restart your computer.

http://www.microsoft.com/downloads/details.aspx?FamilyID=2ab49f45-0f03-4736-9b11-fe4b5b3cb712&DisplayLang=en

 

 

Windows Server System Reference Architecture (WSSRA)

Windows Server System Reference Architecture is a technology architecture that has been rigorously tested and proven in a partnered lab environment to provide exceptional planning and implementation guidance that addresses fundamental infrastructure issues such as availability, security, scalability, and manageability of the platform.

WSSRA consists of the following downloadable packages:

  • Overview Documents
  • Architecture Blueprints
  • Implementation Guides
  • Deployment Toolkit

The Overview Documents provide the supporting information that will aid the understanding of the documentation set and ensure its most effective use within IT infrastructure. The documents included in this download package are as follows:

  • Getting Started
  • Introduction
  • Lab Implementation

Architecture Blueprints provide IT professionals with a common understanding of overriding principles prior to leveraging guidance on specific IT services. This download package includes the following:

  • Introduction to Architecture Blueprints
  • Network Architecture Blueprint
  • Management Architecture Blueprint
  • Application Infrastructure Architecture Blueprint
  • Security Architecture Blueprint
  • Storage Architecture Blueprint

The Implementation Guides provide fully integrated sets of service-specific guidance for each of the services covered as part of WSSRA. Each implementation guide package contains an introduction document, a service blueprint, a planning guide, a build guide, and an operations guide.

The Deployment Toolkit provides all of the low-level scripts, plans, and configuration settings used to build the environment that was used to establish and test the Windows Server System Reference Architecture. The download package contains the following:

  • Build Order Project Plan
  • Equipment Configuration Matrix
  • Low Level Diagram of Services and Components
  • Equipment and Software List
  • Test Scripts
  • Build Scripts
  • Setup Information

http://www.microsoft.com/downloads/details.aspx?FamilyID=d44e34ec-b4e2-49a1-9f40-9ed4ba3765df&DisplayLang=en

 

 

Documents

 

Step-by-Step Guide to Deploying Active Directory Federation Services for Windows Server 2003 R2 Beta 2

This guide provides step-by-step instructions for deploying Active Directory Federation Services (ADFS) on servers running the Microsoft® Windows Server™ 2003 R2 operating system. The current version of this document for Windows Server 2003 R2 Beta 2 provides instructions for deploying ADFS in a Federated Web single sign on (SSO) scenario. Future versions of this document will provide instructions for deploying ADFS in additional scenarios.

http://www.microsoft.com/downloads/details.aspx?FamilyID=062f7382-a82f-4428-9bbd-a103b9f27654&DisplayLang=en

 

Step-by-Step Guide to Getting Started with Microsoft Windows Server Update Services on Windows Small Business Server 2003

Microsoft® Windows Server™ Update Services (WSUS) provides a comprehensive solution for managing updates within your network. This document tells you how to deploy WSUS on your network, including installing WSUS on computers running Windows® SBS 2003, configuring WSUS to obtain updates, configuring client computers to install updates, and approving and distributing updates.

For the most up-to-date product documentation for Windows SBS 2003, see the Microsoft Web site at http://go.microsoft.com/fwlink/?LinkId=33326.

http://www.microsoft.com/downloads/details.aspx?FamilyID=28c43d57-2e15-47b2-9a6f-1514aa3ed05f&DisplayLang=en

 

 

Print Management Step-by-Step Guide

Print Management provides up-to-the-minute details about the status of printers and print servers on the network. You can use Print Management to install printer connections to a group of client computers simultaneously. Print Management can help you find printers that have an error condition by using filters. It can also send e-mail notifications or run scripts when a printer or print server needs attention. On printer models that provide a printer Web page, Print Management has access to more data, such as toner and paper levels, which you can manage from remote locations, if needed.

http://www.microsoft.com/downloads/details.aspx?FamilyID=83066ddc-bc96-4418-a629-48c8abd2c7a0&DisplayLang=en

 

Overview of the Distributed File System Solution in Microsoft Windows Server 2003 R2

As organizations expand to include more users and servers—whether they are located in one site or in geographically distributed sites—administrators find it increasingly difficult to provide users with intuitive, fast access to the files they need. Administrators who manage remote or branch offices face additional challenges, such as limiting network traffic over slow WAN connections, ensuring the availability of files during WAN outages or server failures, and ensuring that branch servers are backed up correctly. To help administrators address these challenges, the Distributed File System solution in Microsoft® Windows Server™ 2003 R2 provides two technologies, DFS Namespaces and DFS Replication, which, when used together, offer simplified, fault-tolerant access to files and WAN-friendly replication.

http://www.microsoft.com/downloads/details.aspx?FamilyID=5e547c69-d224-4423-8eac-18d5883e7bc2&DisplayLang=en

 

Storage Manager for SANs Quick Start Guide

The Storage Manager for SANs component of the Microsoft Windows Server™ 2003 R2 operating system enables you to provision storage on one or more storage subsystems on a storage area network (SAN). Based on Microsoft Virtual Disk Service (VDS) technology, Storage Manager for SANs allows provisioning on Fibre Channel and Internet SCSI (iSCSI) storage subsystems.

http://www.microsoft.com/downloads/details.aspx?FamilyID=d5483d65-5056-4711-a6df-2e2a6e3f9441&DisplayLang=en

 

Server Isolation with Microsoft Windows Explained

This paper provides a detailed overview of server isolation in the Microsoft® Windows® operating systems. It explains how server isolation protects isolated servers and describes the benefits of deploying server isolation in your IT environment. It also provides a brief overview of how to deploy server isolation. This paper is intended for IT professionals in organizations that are investigating using the Microsoft implementation of Internet Protocol

http://www.microsoft.com/downloads/details.aspx?FamilyID=93bed81a-d073-4c2e-866f-e062dc2213b7&DisplayLang=en

 

Introduction to Server and Domain Isolation with Microsoft Windows

You can mitigate some of the risks associated with unauthorized and potentially unfriendly access to your network and its resources by creating an isolated network. There are different ways to create an isolated network. With the Microsoft® Windows® operating systems, you can create an isolated network by using the Active Directory® directory service and Group Policy settings to isolate both your domain and domain member servers that store sensitive data, thus limiting access to only authenticated and authorized users.

http://www.microsoft.com/downloads/details.aspx?FamilyID=9a3e2b2b-695d-4ff9-bcb1-5f2f3001845e&DisplayLang=en

 

Events

 

MSDN Technical Briefing:Shipping in time for Christmas? The Visual Studio Team System Product Tour!

19 September - Reading

Visual Studio 2005 will launch on November 7th 2005. We’re not just launching a great new version of the best selling development environment; we’re also extending the Visual Studio family for non-professional programmers at one extreme and for the whole development team with the introduction of Visual Studio Team System.

https://msevents-eu.microsoft.com/cui/EventDetail.aspx?culture=en-GB&eventid=118761884

 

Infrastructure Architect Forum: Rethinking the Infrastructure Architecture challenge

24th October - Reading

Join us for a day of architectural discussions on how Microsoft takes a consistent and actionable approach to rethinking the Infrastructure Architecture challenge.  Our team of local and regional industry recognised experts will cover this business critical issue, highlighting the rational behind why we need to think again and provide practical and actionable advice as to how you could make a start in addressing this critical business challenge.

https://msevents-eu.microsoft.com/cui/EventDetail.aspx?culture=en-GB&eventid=118762208

 

MSDN Technical Briefing: SQL Server 2005 for SQL Server 2000 Developers (Level 200)

26 October - Reading

SQL Server 2005 offers a wealth of new capabilities for SQL developers: As well as .NET support, enhanced T-SQL and deep XML support, the impressive new Integration Services (SSIS) and extended Reporting Services capabilities mean that SQL Server 2000 developers will find an abundance of powerful new features in SQL Server 2005. While upgrading your SQL Server 2000 database to SQL Server 2005 is largely trivial, it’s important for developers to gain an understanding of how to take advantage of new features and facilities in SQL Server 2005. This event will provide good insights into some of the developer-focused new features in SQL Server 2005, allowing you to begin to exploit the power of SSIS, Reporting Services, T-SQL enhancements and .NET/XML support in your application development projects.

https://msevents-eu.microsoft.com/cui/EventDetail.aspx?culture=en-GB&eventid=118761399

 

8 September, Reading: TechNet Security Briefing - Fighting Attack and Securing the Infrastructure

This complimentary evening event is bought to you by the TechNet Programme to help IT Professionals and Security experts from organisations of all sizes secure their infrastructure and fight attack. Session one will look at understanding and fighting Malware: Viruses, Spyware and Rootkits, then after beer and pizza we will go on to look in detail at the Security Configuration Wizard in Windows Server 2003 SP1.

http://www.microsoft.com/uk/technet/training/events.mspx#EFA

 

30 September: The Best of MMS (Microsoft Management Summit)

The "Best of MMS" brings top rating speakers from the highly successful Microsoft Management Summit (MMS) 2005 event to present on key Management topics here in the UK. This is your opportunity to learn about the latest management technologies and solutions from Microsoft and to hear the top content delivered at MMS in Las Vegas.

https://msevents-eu.microsoft.com/cui/EventDetail.aspx?culture=en-GB&eventid=118761227

 

13 October, Reading: TechNet Briefing: Microsoft Virtual Server 2005 and Virtual PC 2004 - Live and uncut!

This interactive evening session will drill into the capabilities and scenarios around using Microsoft Virtualisation products to solve real-world problems. Virtual Server 2005 and Virtual PC 2004, share many common elements. This session will examine the architecture, core functionality and capabilities of both products and explain the key differences. We will discuss where the future direction of virtualisation is heading with an overview of the forthcoming changes in Virtual Server 2005 Service Pack 1 and Windows Virtualisation.

http://www.microsoft.com/uk/technet/training/events.mspx#EEA

 

13 October, Reading: TechNet Briefing: Introduction to Blogs and Blogging

The future belongs to bloggers - but what is a blog and why do you need one? This session will show you some of the best ways to create a blog and build blog traffic quickly, increase interest in you and your product or service, and improve your bottom-line results. Learn tips and tricks from leading Microsoft bloggers and share their success.

http://www.microsoft.com/uk/technet/training/events.mspx#EBA

 

24th October, Infrastructure Architect Forum, Microsoft Campus, Reading

Join us for a day of architectural discussions on how Microsoft takes a consistent and actionable approach to rethinking the Infrastructure Architecture challenge. We'll address this business critical issue, highlighting the rational behind why we need to think again and provide practical and actionable advice as to how you could make a start in addressing this critical business challenge.

https://msevents-eu.microsoft.com/cui/EventDetail.aspx?culture=en-GB&eventid=118762208

 

3 November, Reading: TechNet Briefing: Active Directory Fundamentals and Administration

In this session we will cover some of the basic concepts of the Active Directory. We will look at what a directory service is and the benefits Active Directory offers, the logical concepts as they relate to Domain, Trees and Forests. As well as the physical concepts of Domain Controllers and Sites. We will also explain the relationship between the Active Directory and the Domain Naming Service.

http://www.microsoft.com/uk/technet/training/events.mspx#EEA

 

9th December, Solution Architect Forum: Defining, Building and Using Software Factories

This one-day event will demonstrate how Software Factories can dramatically reduce complexity while improving productivity. Join other solution architects to explore this interesting topic and take the opportunity to network with your peers.

https://msevents-eu.microsoft.com/cui/EventDetail.aspx?culture=en-GB&eventid=118762004

Internet

News

•

TryIIS.com Campaign Launched to Bolster IIS 6.0 Adoption

ENT News (May 18, 2004): Scott Bekker reports that Microsoft is starting a marketing campaign to single out the Internet Information Services 6.0 Web server component as a strong reason to upgrade to the server OS.

•

Reliability Experts Help Ensure Microsoft Windows Server 2003 and Other Technologies are Dependable for Customers

Microsoft PressPass (May 3, 2004): Windows Server 2003 customers attest to its strengths in reliability, availability and overall performance—and IIS 6.0 plays a key role.

•

IIS 6.0 Helps Windows Server 2003 Win e-Business Foundation Award from eWeek

Citing improved security features, including a "faster, more reliable and more secure" IIS 6.0, eWeek judges award top honors in the e-Business Foundation category to Windows Server 2003. They also recognized IIS 6.0 for its improved development platform.

•

Microsoft Tops Port 80 Web Server Survey

Web Host Industry Review (March 26, 2004): IIS continues to run on over half of the top 1000 corporate Web sites, according to Port 80 Software's March Web server survey. For the second consecutive month, Microsoft IIS 6.0 on Windows Server 2003 made the largest jump of any single platform, gaining 0.7 percent of total market share after increasing by 0.8 percent in February.

•

A Web Server You Can Count On

Windows & .NET Magazine (March 2004): Brett Hill writes about the improved reliability of IIS 6.0. Find out about application isolation, recycling worker processes, and more.

•

IIS 6.0 Gets Kudos for HTTP Compression Tools

Check out this overview of Web servers that use HTTP compression.

•

IIS Is the Web Server of Choice

Port80 Software (July 2003): The majority of Fortune 1000 enterprises are choosing IIS, according to Port80 Software's July survey.

•

At Web Sites, Windows Outpaces Linux

CNET (July 18, 2003): Microsoft has seen a 300 percent increase in the number of Web sites hosted on its recently launched Windows Server 2003 software in the last three months—with a considerable amount of the new business representing moves away from Linux, according to a survey published this week.

•

Nearly 100,000 Active Web Sites Built on Windows Server 2003

ENT News (July 17, 2003): Researchers ... say Windows Server 2003 is closing in on its 100,000th active Web site in the three months since the launch of Microsoft's latest operating system. The official count is 88,400 active Web sites ...

•

Windows Server 2003 Uptake Strong

Netcraft (May 6, 2003): Windows Server 2003 is being rapidly adopted for production Web sites. In fact, thousands of Web sites were running Windows Server 2003 before its official release.

•

.NET Cure for Health Developers

Australian IT (March 10, 2003): Using Windows Server 2003, the .NET Framework, and IIS 6.0, Queensland Health rolls out a standard development environment for .NET design, development, and deployment.

•

Microsoft Exec: Windows Server 2003 Focuses on Customers

InformationWeek (February 18, 2003): Bill Veghte, corporate Vice President of Microsoft's Windows Server Division, highlights security in Windows Server 2003 and IIS 6.0.

•

Digex: IIS 6.0 Delivers the Goods

ENT News (January 30, 2003): One of the largest managed hosting companies in the world praises IIS 6.0 for its "outstanding" reliability and security.

•

What's New in IIS 6.0 and ASPs on Windows 2003 Server?

devx.com (January 29, 2003): Security, dual operating modes, and improvements in the use of ASP pages may make IIS 6.0 the best reason for developers to embrace Windows 2003 Server.

•

Win.NET Server: Time to Upgrade?

Windows Web Solutions (January 2003): This editorial makes the case for upgrading your Windows NT or Windows 2000 Server Web servers to take advantage of the availability, reliability, and scalability benefits of IIS 6.0.

•

What You Need to Know About IIS 6.0: Better Reliability, Security, and Manageability

Windows & .NET Magazine (December 2002): A new process model, process recycling, and health detection technologies boost the reliability of IIS 6.0. The standards-based XML metabase means you can make changes while your Web site is live.

 

KB’s

 

·          FIX: The value in the ETAG field is updated when you modify a metabase property in IIS 6

http://support.microsoft.com/?kbid=900245

·          Outgoing NetMeeting calls may not work in ISA Server 2000

http://support.microsoft.com/?kbid=841635

·          The ISA Server Control service stops when you specify a local address table range that starts or ends with IP address 255.255.255.255 in ISA Server 2000

http://support.microsoft.com/?kbid=841634

·          The Web filter code receives an internal error message when you use an ISA Server 2000 ISAPI Web filter to change the special request headers on the SF_NOTIFY_AUTH_COMPLETE notification.

http://support.microsoft.com/?kbid=897719

·          In Internet Security and Acceleration Server 2004, the password appears to be automatically generated in the "Dialing Configuration" dialog box, but the dial-up connection does not work

http://support.microsoft.com/?kbid=841636

·          A silent configuration of the BizTalk Adapter for MQSeries is unsuccessful if you specify a value of "thisuser" for the AppIdentity element in the Config.xml file

http://support.microsoft.com/?kbid=904848

·          A suspended message is sent through a destination send port even if the send port is not started in BizTalk Server 2004

http://support.microsoft.com/?kbid=904791

 

 

Downloads

•

Authentication and Access Control Diagnostics (AuthDiag) Version 1.0

Use AuthDiag to troubleshoot web site authentication and permissions issues on x86, ia64, and amd64 platforms.

•

SSL Diagnostic Utility Download for IIS

Web administrators can use this new tool for troubleshooting Secure Sockets Layer (SSL) configuration problems on IIS servers.

•

URLscan Version 2.5

Enhance IIS Web site security with URLscan.

•

IIS 6.0 Migration Tool

Use this command-line tool to automate several of the steps needed to move a Web application from IIS 4.0, IIS 5.0 or IIS 6.0 to a clean installation of Internet Information Services (IIS) 6.0. The tool transfers configuration data, Web site content, and application settings to a new IIS 6.0 server.

•

Migrating Web Sites from IIS 4.0 to IIS 6.0

For IT administrators responsible for network operations in a smaller organization, this paper provides a simplified migration path as well as step-by-step instructions for a single Web server migration.

•

IIS 6.0 Resource Kit

Whether you manage a single Web server or many, the prescriptive, task-based, and scenario-based guidance in this book will help you effectively plan, deploy, operate, and troubleshoot your IIS 6.0 solution.

•

IIS 6.0 Resource Kit Tools

The IIS 6.0 Resource Kit Tools can help you administer, secure, and manage IIS. Use them to query log files, deploy SSL certificates, employ custom site authentication, verify permissions, troubleshoot problems, migrate your server, run stress tests, and more. Read the review of these tools.

•

IT Download Resources

Browse this central repository of Microsoft download resources for IT professionals.

•

SQL 2000 Report Pack for IIS Logs

Analyze data from your IIS Logs using pre-built reports or create your own customized reports. The Microsoft SQL Server 2000 Report Pack for IIS Logs includes 12 in-depth reports that can be populated with your own IIS Log data or used as templates for designing reports to fit your needs.

 

Articles

•

IIS 6.0 Overview for SP1

Provides a detailed overview of the benefits and product features available in IIS 6.0 RTM and the updates to IIS 6.0 in Windows Server 2003 Service Pack 1 (SP1).

Events

•

Important Updates to IIS 6.0 in Windows Server 2003 Service Pack 1

Microsoft Windows Server 2003 Service Pack 1 brought several significant updates to Microsoft Internet Information Services (IIS) 6.0. In this webcast we show you some slick IIS capabilities such as tracing, Secure Sockets Layer host headers, improved HTTP.sys logging, HTTP application programming interface improvements, the Microsoft Windows Server 2003 Security Configuration Wizard and more.

•

Centralizing Logging in IIS 6.0: Service Pack 1 Centralized W3C Logging

A secret was slipped into Microsoft Windows Server 2003 Service Pack 1 and Microsoft Internet Information Services (IIS) 6.0 called W3C Centralized Logging. Building on the Centralized Binary Logging feature, HTTP.sys and IIS 6.0 are now capable of logging all requests for Web sites to a single log file. With W3C Centralized Logging, you are now able to capture cookie and Win32 error codes that are logged in plain text files. Join us for this webcast to learn the advantages of this new logging method, and how to take this centralized approach and redirect it to a remote UNC share for centralized log management for Web farms.

•

Effectively Using IIS 6.0 Security

Get an overview of the new IIS 6.0 security architecture in this session, and learn how these features help you to protect your assets from hackers. Explore the underlying security principles of IIS 6.0, which is locked down by default and uses a new, low-privileged security account by default. Learn about several new security features of IIS 6.0: including: SSL improvements, authentication using Microsoft Passport, URL Authorization, and constrained delegated authority. Lastly, this session will overview some common secure deployment scenarios that are being deployed today.

•

IIS 6.0—Using FTP Security and User Isolation

In IIS 6.0, FTP security is a primary focus.  This webcast will outline the new security options available to customers who implement IIS 6.0's FTP services.  This discussion will include topics such as user isolation, which includes local and active directory isolation, ACL security, and other security related topics. This webcast will also point out the appropriate differences between IIS 6.0 FTP and IIS 5.0 FTP.

•

SSL Concepts and Troubleshooting

This webcast will focus on a commonly used protocol for securing data transmission between a client and the Internet Information Services (IIS). It will discuss SSL on each IIS platform currently supported by Microsoft and will also outline tips, tricks, and tools that make diagnosing SSL problems much simpler. This webcast will be appropriate for Windows and Exchange administrators as these are the responsible parties for ensuring smooth transmission of data between client and Windows and Exchange Servers (Outlook Web Access).