The Internet technology blog of the DSS team : Technical Rollup Article

Monday, October 17, 2005 2:25 PM DSSInternet

Technical Rollup Article - August 2005

Security

News

Trustworthy Administrators -- by Steve Riley http://go.microsoft.com/?linkid=3563067

Do you trust your administrators? That seemingly innocent question creates a serious dilemma in the minds of a lot of people. While we all know what we'd like the answer to be, the disappointing fact is that, increasingly, the true answer is the opposite.

Microsoft Security Guidance Center: Recently Published

http://www.microsoft.com/technet/security/recent/default.mspx

Microsoft Security Bulletin Summary for July, 2005

http://www.microsoft.com/technet/security/bulletin/ms05-jul.mspx

Security Guidance

Microsoft Security: Tip of the Month -- Dealing with Multiple Identity Stores http://go.microsoft.com/?linkid=3563072

Identity management includes the process and technologies for provisioning, deprovisioning, managing, and synchronizing digital identities while complying with governing policies. Identity integration deals with linking identity information in multiple directories, databases, and other identity stores. This provides a unified view of users, and can implement identity provisioning and deprovisioning across multiple stores.

New Tools and Troubleshooting Guides Available for ISA Server

New tools for Microsoft Internet Security and Acceleration (ISA) Server 2004 have been posted to the ISA Server Download Center http://go.microsoft.com/?linkid=3563073. These tools can be used throughout the product deployment cycle to help you configure and maintain your ISA Server deployment. The ISA Server product team reviewed issues that customers most commonly encountered and created trouble-shooters http://go.microsoft.com/?linkid=3563074 to detail how to resolve these issues.

Using Wi-Fi Safely: Encryption and Other Tips http://go.microsoft.com/?linkid=3563081

Connecting to the Web through Wi-Fi can make your laptop even more vulnerable to hackers and pernicious code. How do you make your Wi-Fi experience safer? Here are four new and existing security protocols and the level of security they offer.

Top Stories

Microsoft Momentum Newsletter -- Focus on Compliance http://go.microsoft.com/?linkid=3563068
These days, compliance is near the top of the list of IT priorities for most companies. Organizations of all sizes face a growing number of state and federal regulations, industry codes and standards, and other new requirements, all with their own demands and deadlines. Among the most universal concerns: privacy protection. In "Keeping Private Information Private," Momentum contributing writer Joanna L. Krotz describes how midsize businesses can meet mandates to protect employee, customer, and partner data. Also in this issue: advice on storing and retrieving electronic records and insight into the hidden benefits of Sarbanes-Oxley compliance.

Role Comparison Security Report: Database Server Role http://go.microsoft.com/?linkid=3563069
This commissioned study, conducted by Security Innovation and written by Herbert Thompson and Fabien Casteran, found that Microsoft Windows Server 2003 running SQL Server 2000 Service Pack 3 had fewer vulnerabilities than Red Hat Enterprise Linux (RHEL) running Oracle 10g or RHEL running My SQL.

How Microsoft Technologies Can Help You Comply with Government Regulations http://go.microsoft.com/?linkid=3563070
Companies and government agencies are increasingly being required to meet new and expanding compliance regulations, including the Sarbanes-Oxley Act of 2002. Key documents, organizational policies, and vital pieces of information must be available for fast retrieval and reporting. Find out how Microsoft technologies can help your company be in compliance with a growing number of regulations.

Cell Phone Virus Threats: Why They Shouldn't Be Dismissed http://go.microsoft.com/?linkid=3563071
Viruses are every computer user's worst nightmare. But is your mobile phone vulnerable to an infection, too?

Downloads

Microsoft Baseline Security Analyzer v2.0 (for IT Professionals)
http://www.microsoft.com/downloads/details.aspx?FamilyID=4b4aba06-b5f9-4dad-be9d-7b51ec2e5ac9&DisplayLang=en

Certificate Migration from Key Management Service and Key Recovery at Microsoft
http://www.microsoft.com/downloads/details.aspx?FamilyID=f8398636-d73c-4435-93f9-f2c9bac77d32&DisplayLang=en

June 14, 2005 Enterprise Update Scan Tool v2 (standalone version)
http://www.microsoft.com/downloads/details.aspx?FamilyID=10214bed-acc0-475d-ba97-0def3bba1937&DisplayLang=en

Extended Security Update Inventory Tool
http://www.microsoft.com/downloads/details.aspx?FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b&DisplayLang=en

Microsoft® Windows® Malicious Software Removal Tool (KB890830)
http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

MSDN TV: Writing Secure Code with Visual Studio 2005
http://www.microsoft.com/downloads/details.aspx?FamilyID=bed43dd9-a02b-46ad-93be-84b5b1a8dc27&DisplayLang=en

Radio Frequency Identification (RFID) Privacy: The Microsoft Perspective
http://www.microsoft.com/downloads/details.aspx?FamilyID=eeb9de77-c1ee-4c7b-8db9-00614b8bee63&DisplayLang=en

Microsoft® Windows AntiSpyware (Beta)
http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en

Documents

New Server Security Planning Guides

These guides will help you address common security problems, plan a security monitoring system, implement smart cards, secure local domain-based accounts, and review the challenges in planning and implementing quarantine services with VPN.

· Services and Service Accounts http://go.microsoft.com/?linkid=3563075

· Monitoring and Attack Detection http://go.microsoft.com/?linkid=3563076

· Access Using Smart Cards http://go.microsoft.com/?linkid=3563077

· Administrator Accounts http://go.microsoft.com/?linkid=3563078

· Implementing Quarantine Services http://go.microsoft.com/?linkid=3563079

· Microsoft Identity and Access Management Series http://go.microsoft.com/?linkid=3563080

Events

· Hone Your Security Expertise with Microsoft E-Learning Clinics http://go.microsoft.com/?linkid=3563113
· Applying Microsoft Security Guidance with Hands-On Labs http://go.microsoft.com/?linkid=3563114
· Extend Your Skills: Use the Stand-alone Security Virtual Labs http://go.microsoft.com/?linkid=3563115

TechNet Webcast: How Microsoft IT Does Security (Level 300)

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?culture=en-US&EventID=1032275663&CountryCode=US

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

Windows Platform

News

Microsoft unveils Windows Vista

Microsoft Corp. announced the official name of its next-generation Windows® client operating system, formerly code-named “Longhorn.” Video of the name announcement can be seen via the link below.

http://www.microsoft.com/presspass/press/2005/jul05/07-22LHMA.mspx

Windows Vista Beta 1 Begins

Windows Vista™ (formerly code named Longhorn) Beta 1 for developers and IT professionals has begun. Beta 1 for developers: http://msdn.microsoft.com/windowsvista/. Beta 1 for IT Professionals. http://www.microsoft.com/technet/windowsvista/default.mspx

http://www.microsoft.com/windowsvista/default.mspx

Windows Genuine Advantage 1.0 Goes Live

Microsoft Corp. today announced the transition of the Windows® Genuine Advantage (WGA) pilot to a version 1.0 launch with worldwide availability. WGA is part of Microsoft’s ongoing commitment to protecting its customers from software counterfeiting and to helping support partners through education, engineering, and enforcement of policies and laws. WGA, designed to differentiate the value of genuine Windows-based software from counterfeit software, enables customers to enjoy the capabilities they expect, provides them with confidence that their software is authentic, and delivers ongoing system improvements, including approximately $450 in software offerings available only to genuine users.

http://www.microsoft.com/presspass/press/2005/jul05/07-25WGA1PR.mspx

Learn More About "Avalon"

Hear Microsoft Senior Program Manager Simon Guest talk about Java and .NET interoperability, and watch a demo of "Avalon," one of the new technologies coming with "Longhorn."

http://www.microsoft.com/downloads/details.aspx?FamilyID=e1b0ad4f-f0ab-4365-8a4c-317a1abc62ab&DisplayLang=en

How Microsoft IT Manages Active Directory Infrastructure

Date and Time: Tuesday, July 19, 2005—8:00 a.m. Pacific Time

Presenter: Brian Puhl, Sr. Systems Engineer, Microsoft Corporation

Abstract: Ever wondered how Microsoft information technology (IT) manages and operates its Active Directory infrastructure? Do you think Microsoft employees are especially tolerant of downtime or performance issues? Microsoft has the oldest production Active Directory in the world (happily authenticating users since 1999). Come listen as Microsoft IT shares its best practices on everything from domain controller placement, performance monitoring and change management to disaster recovery, tools and 64-bit domain controllers.

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032276983&EventCategory=3&culture=en-US&CountryCode=US

How Microsoft IT Does Security

Date and Time: Tuesday, July 26, 2005—9:00 a.m. Pacific Time

Presenter: Igor Volovich, Microsoft IT Security Technologist, Microsoft Corporation

Abstract: If you have ever been curious how Microsoft handles information technology (IT) security, this webcast is one you will definitely want to see. The webcast begins with an overview of the Microsoft IT environment, and examines the challenges Microsoft IT faces in managing and securing that environment. Learn about the Microsoft IT approach to security as a risk management objective. The discussion also includes an examination of representative risks and the tactics undertaken to mitigate them to acceptable levels.

http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032275663&EventCategory=5&culture=en-US&CountryCode=US

Downloads

Download Windows Server 2003 Service Pack 1 (32 bit)

Enhance the security of your network servers with new tools and improved features.

http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=22CFC239-337C-4D81-8354-72593B1C1F43&displaylang=en

Download the Visual Studio 2005 Tools for Office - Outlook (Beta)

With the new managed Outlook add-in support, developers have a framework and tools to debug, secure, and deploy the Outlook add-ins they create using Visual Studio 2005 Tools for Office.

http://www.microsoft.com/downloads/details.aspx?FamilyId=74B56C72-7A1F-431F-A29C-58EB39E97A86&displaylang=en

Free Book download on MSDN - Upgrading Microsoft Visual Basic 6.0 to Microsoft Visual Basic .NET

Upgrading Microsoft Visual Basic 6.0 to Microsoft Visual Basic .NET is the complete technical guide to upgrading Visual Basic 6 applications to Visual Basic .NET, covering all upgrade topics from APIs to ZOrders. It shows how to fix upgrade issues with forms, language, data access, and COM+ Services, and how to upgrade applications with XML Web services, ADO.NET, and .NET remoting. It also provides big-picture architectural advice, a reference of function and object model changes, hundreds of before-and-after code samples, and a CD packed with useful examples.

http://msdn.microsoft.com/vbrun/staythepath/additionalresources/upgradingvb6/

Free Book download on MSDN - Introducing Visual Basic 2005 for Developers

Get a focused, first look at the features and capabilities in Microsoft Visual Basic 2005, Visual Studio 2005, and .NET Framework 2.0. If you currently work with Visual Basic 6, these authors fully understand the adoption and code migration issues you’ll encounter. They’ll step you through a quick primer on .NET Framework programming, offering guidance for a productive transition. If you already work with .NET, you’ll jump directly into what’s new, learning how to extend your existing skills. From the innovations in rapid application development, debugging, and deployment, to new data access, desktop, and Web programming capabilities, you get the prerelease insights and code walkthroughs you need to get productive right away.

http://msdn.microsoft.com/vbasic/whidbey/introto2005/

Get the SafeDisc Windows XP Fix for Microsoft Games

If you are running a restricted user account with fast user switching under Microsoft Windows XP and your game will not start correctly, you may need this download.

http://www.microsoft.com/downloads/details.aspx?FamilyID=eae20f0f-c41c-44fe-84ce-1df707d7a2e9&DisplayLang=en

Identity Integration Feature Pack 1a for Microsoft Windows Server Active Directory

Identity Integration Feature Pack 1a for Microsoft Windows Server Active Directory helps you synchronize identity information and easily provision and deprovision accounts and identity information (6/30/2005).

http://www.microsoft.com/downloads/details.aspx?FamilyID=D9143610-C04D-41C4-B7EA-6F56819769D5&displaylang=en

Microsoft Management Pack Notifier for Microsoft Operations Manager 2005

This management pack enables the generation of notification alerts as updated management packs are released (7/1/2005).

http://www.microsoft.com/downloads/details.aspx?FamilyID=A24CEA3A-1920-4B18-8CF2-8BF78C94C917&displaylang=en

Get the Latest DirectX Redistributable for Software Developers

Download the redistributable (updated June 2005), so you can include DirectX with your applications for better graphic, video, 3D animation, and rich audio performance.

http://www.microsoft.com/downloads/details.aspx?FamilyID=3ad9f0d1-8d81-40c8-9815-924dcd4cd2c5&DisplayLang=en

Enterprise Update Scan Tool v2 (Standalone Version)

Microsoft has released a new tool designed to help enterprises detect updates provided with the Microsoft Security Bulletins released June 14, 2005. This tool is a command line scanning tool built for the sole purpose of helping customers determine systems that may need security updates provided with the released bulletins (7/12/2005).

http://www.microsoft.com/downloads/details.aspx?FamilyID=10214BED-ACC0-475D-BA97-0DEF3BBA1937&displaylang=en

Extended Security Update Inventory Tool

The Extended Security Update Inventory Tool is used to detect security bulletins not covered by MBSA, including MS04-028, February 2005 bulletins, and future security bulletins that are exceptions to MBSA (7/12/2005).

http://www.microsoft.com/downloads/details.aspx?FamilyID=2C93DA1D-48A0-4E5C-991F-87E08954F61B&displaylang=en

Active Directory Management Pack for MOM 2005

The Microsoft Windows Active Directory Management Pack provides forest-wide monitoring of your Active Directory service and its required subsystems (7/13/2005).

http://www.microsoft.com/downloads/details.aspx?FamilyID=B516E614-814A-4277-ABF9-8D5315D2BA06&displaylang=en

Documents

The Security Monitoring and Attack Detection Planning Guide

Extensive media reporting about the spread of malicious software through the Internet has significantly raised the profile of external threats to organizations' network resources. However, some of the greatest threats to any organization's infrastructure come from attacks that originate from within the internal network. The internal attacks that have the highest potential for damage result from the activities of those people in the most trusted positions, such as network administrators. Analysis of both internal and external threats has led many organizations to investigate systems that monitor networks and detect attacks.

http://go.microsoft.com/fwlink/?LinkId=41309

Windows Server System Reference Architecture

Windows Server System Reference Architecture delivers architectural guidance on enterprise level IT infrastructure.

http://www.microsoft.com/downloads/details.aspx?FamilyID=D44E34EC-B4E2-49A1-9F40-9ED4BA3765DF &displaylang=en

Microsoft Identity Integration Server 2003 Technical Reference

The Technical Reference provides essential technical information about MIIS 2003.

http://www.microsoft.com/downloads/details.aspx?FamilyID=d7894cc9-eeeb-40d9-8f5f-573050624f67&DisplayLang=en

Access the Microsoft Post Event Archive of presentations and papers

Have you attended a Microsoft® event recently and want to review the presentations and session notes? Or maybe you couldn't make an event and want to see what you missed, or simply learn more about Microsoft technologies. Get all the information you need here. We've gathered together presentations, notes and handouts on Microsoft technologies that have been delivered at UK TechNet events, and you can also view recent webcast presentations.

http://www.microsoft.com/uk/technet/learning/

Microsoft Windows Server 2003 TCP/IP Implementation Details

This white paper describes the implementation of the TCP/IP protocol stack in the Microsoft® Windows Server™ 2003 family and is a supplement to the Windows Server 2003 Help and Support Center and Technical Reference documentation. This white paper contains an overview of TCP/IP in Windows Server 2003 features and capabilities, a discussion of protocol architecture, and detailed discussions of the core components, network application interfaces, and critical client components and services. The intended audience for this paper is network engineers and support professionals who are already familiar with TCP/IP. Except where noted, the TCP/IP implementation for Windows® XP is the same as that for Windows Server 2003.

http://www.microsoft.com/downloads/details.aspx?FamilyID=06c60bfe-4d37-4f50-8587-8b68d32fa6ee&DisplayLang=en

Just Released - Even More Free E-Learning Titles for Visual Studio 2005

Four new E-Learning titles are now available for Visual Studio 2005 and ASP.NET 2.0. These US$99 courses are free for a limited time. Take one today.

https://www.microsoftelearning.com/visualstudio2005/

Readiness Starts Here: Visual Studio 2005 Skills Assessment

Free online assessments help you analyze your current skills, and provide you with a learning plan that recommends books, E-Learning, classroom training, and MSDN resources.

http://assessment.learning.microsoft.com/test/home.asp

Upgrade Your Visual Basic Skills

Take your development skills from Visual Basic 6 to Visual Basic .NET, and then on to Visual Basic 2005, with free online books from Microsoft Press. Visit the MSDN VBRun Developer Center and download Upgrading Microsoft Visual Basic 6.0 to Microsoft Visual Basic .NET and Introducing Visual Basic 2005 for Developers.

http://msdn.microsoft.com/vbrun/staythepath/additionalresources/default.aspx

Free Online Book from Microsoft Press

http://lab.msdn.microsoft.com/vs2005/get/

Events

Microsoft Events

MSDN TechTalk: Web and client Development: Great user experiences on the Microsoft Platform, now and in the future.

In this evening event you’ll spend an hour learning about ASP.NET 2.0, Microsoft’s web application development platform. We’ll take you on a whistle-stop tour of the basics of ASP.NET development and then look at the great new features for ASP.NET 2.0, to be released later this year. In the second session we’ll look at techniques for combining Macromedia Flash with ASP.NET and finally provide a taste of things to come; creation of great user experiences using the XAML language and Avalon platform.

11 August - Reading

https://msevents-eu.microsoft.com/cui/EventDetail.aspx?culture=en-GB&eventid=118760519

MSDN Technical Briefing: SQL Server 2005 June CTP

With the full release of SQL Server 2005 drawing closer, take the opportunity to learn more about the developer features of Microsoft’s huge database and business intelligence product. Based on the publicly-available Community Technology Preview (CTP), this session will provide you with the skills you need to start taking advantage of the very latest developer features of SQL Server 2005.

17 August - Reading

https://msevents-eu.microsoft.com/cui/EventDetail.aspx?culture=en-GB&eventid=118759938

MSDN TechTalk: A first look at Windows Mobile 5.0 for Developers

This TechTalk event is designed to provide developers with an overview of the Windows Mobile 5.0 Operating System, which along with Visual Studio 2005 enables quicker and easier development of feature rich mobile applications and solutions. See Visual Studio 2005 Beta in action, cool new APIs and controls, the new device emulator as well as other enhancements for Pocket PC and Smartphone development.

31 August - Reading

https://msevents-eu.microsoft.com/cui/EventDetail.aspx?culture=en-GB&eventid=118760392

MSDN TechTalk: SQL Server 2005 for SQL Server 2000 Developers (Level 200)

SQL Server 2005 offers a wealth of new capabilities for SQL developers: As well enhancements to T-SQL, the impressive new Integration Services (SSIS) and extended Reporting Services capabilities mean that SQL Server 2000 developers will find an abundance of powerful new features in SQL Server 2005. While upgrading your SQL Server 2000 database to SQL Server 2005 is largely trivial, it's important for developers to gain an understanding of how to take advantage of new features and facilities in SQL Server 2005. This event will provide good insights into some of the developer-focused new features in SQL Server 2005, allowing you to begin to exploit the power of SSIS, Reporting Services, and T-SQL enhancements in your application development projects.

21 September - London

https://msevents-eu.microsoft.com/cui/EventDetail.aspx?culture=en-GB&eventid=118761397

Internet

News

IIS Insider — July 2005
http://www.microsoft.com/technet/community/columns/insider/default.mspx

Downloads

FIX: IIS 6.0 compression corruption causes access violations
On a computer that is running Microsoft Windows Server 2003 and Microsoft Internet Information Services (IIS) 6.0, static files that are compressed may become corrupted and may include content from other files on the Web server. If this behaviour...
http://support.microsoft.com/?scid=kb;en-us;831464&spid=2097&sid=global

You receive an "Access is denied" error message when you try to view a Web page in Internet Explorer 6 SP1.
Fixes a problem where you receive an "Access is denied" error message when you try to view a Web page in Microsoft Internet Explorer 6 SP1 that you could view in Internet Explorer 6

http://support.microsoft.com/?scid=kb;en-us;831923&spid=2097&sid=global

MS04-030: Vulnerability in WebDAV XML message handler could lead to a denial of service
Contains instructions about how to obtain security bulletin MS04-030
http://support.microsoft.com/?scid=kb;en-us;824151&spid=2097&sid=global

How to performance-tune your applications in IIS 6.0
This article outlines important information about how to use Internet Information Services (IIS) 6.0 to tune your applications for high performance. The links provided in the "More Information" section direct you to the online documentation for...
http://support.microsoft.com/?scid=kb;en-us;814876&spid=2097&sid=49

Latest KB’s

You receive "HTTP Error 401" error messages, and you intermittently cannot connect to a Web site that is hosted on IIS 6.0
http://support.microsoft.com/?kbid=902160

Internet Information Services 6.0 log file entries may not be sorted in chronological order on a Windows Server 2003-based computer
http://support.microsoft.com/?kbid=900700

You may receive a "The function requested is not supported" error message when you try to connect to a Web site that is hosted on IIS
http://support.microsoft.com/?kbid=903071

ISA

Downloads

SACertTool for ISAServer 2004 Enterprise Edition
Deploy certificates required to authenticate communications between ISA Server array members and the Configuration Storage server in a number of ISA Server deployment scenarios.
Released July 20, 2005
http://www.microsoft.com/downloads/details.aspx?FamilyId=F8F60164-C5A5-4716-9FF4-2D56C86506C3&displaylang=en

MSDEToText Tool for ISA Server 2004
Display the contents of your Microsoft Data Engine (MSDE) Firewall and Web Proxy logs on-screen, or write log contents to a text file.
Released July 20, 2005
http://www.microsoft.com/downloads/details.aspx?FamilyId=A60A09A0-E4AD-47C7-9961-5E22E65CA986&displaylang=en

Remote Access Quarantine Tool for ISA Server 2004
Use this tool to prepare ISA Server installed on a computer running Windows Server 2003 as an RQS listener component for VPN quarantine control.
Released July 20, 2005
http://www.microsoft.com/downloads/details.aspx?FamilyId=17897522-AB69-46E0-9860-E2D9EC8CA122&displaylang=en

RemoveAllNLBSettings Tool for ISA Server 2004 Enterprise Edition
Save time removing Network Load Balancing (NLB) settings with this tool.
Released July 20, 2005
http://www.microsoft.com/downloads/details.aspx?FamilyId=1B02DFA5-B982-48CD-AD4C-B72BBAC0002F&displaylang=en

CacheDir Tool for ISA Server 2004
View real-time cache contents, save cache content to a file, and mark obsolete items that should not be served from the cache.
Released July 20, 2005
http://www.microsoft.com/downloads/details.aspx?FamilyId=88117626-D72C-4CC8-A15F-C1FBDBCFF688&displaylang=en

Latest KB’s

ISA2000 Outbound Web Proxy Access may fail after Applying MS05-034
http://support.microsoft.com/?kbid=903236

Microsoft Internet Security and Acceleration (ISA) Server 2004 Enterprise Edition Update for Configuration Storage server connectivity using certificate authentication.
http://support.microsoft.com/?kbid=894609

Microsoft Internet Security and Acceleration (ISA) Server 2004 Standard Edition RPC Filter Blocks Outlook Traffic from Computers Running Windows Server 2003 Service Pack 1 (SP1)
http://support.microsoft.com/?kbid=897716

Microsoft Internet Security and Acceleration (ISA) Server 2004 Enterprise Edition RPC Filter Blocks Outlook Traffic from Computers Running Windows Server 2003 Service Pack 1 (SP1)
http://support.microsoft.com/?kbid=897716

Filed under: Technical Rollup Articles

Comments

No Comments

Anonymous comments are disabled

The Internet technology blog of the DSS team

Search

Tags

News

Archives

Biztalk Links

IIS Links

Other

Technical Rollup Article - August 2005

Comments