The Internet technology blog of the DSS team

Security

News

Frequently Asked Questions About Passwords -- by Jesper M. Johansson http://go.microsoft.com/?linkid=4089222

Read about how passwords are stored in Windows and how passwords can be attacked. You'll also learn steps you can take to prevent your passwords from being cracked.

Security Tip of the Month: Rootkits: The Obscure Hacker Attack http://go.microsoft.com/?linkid=4089226
A rootkit is a special type of malicious software because it's hard to detect and you don't know what it is doing. The best strategy is to prevent a rootkit from getting into your system. But if it's too late for prevention, this article tells you how to identify rootkits and how to get rid of them.

Steve Ballmer Details Microsoft’s Security Strategy

Microsoft announces new product to help protect business customers, collaborates with governments and industry on evolving threats.

http://www.microsoft.com/presspass/press/2005/oct05/10-06SecuritySpeechPR.mspx

Understanding Security in Microsoft Internet Explorer 6 in Windows XP SP2 http://go.microsoft.com/?linkid=4070846

Microsoft Security Bulletin Summary for October, 2005

http://www.microsoft.com/technet/security/bulletin/ms05-oct.mspx

Search for previous security bulletins http://go.microsoft.com/?linkid=3992478

Security Bulletin Feed http://go.microsoft.com/?linkid=3992479 RSS http://go.microsoft.com/?linkid=3992480

November is Security Month at MSDN Magazine
In our annual security issue, well-known security experts discuss authentication, Web services security, untrusted add-ins, code access security, and more.
http://go.microsoft.com/?linkid=4126354

Do You Trust It? Discover Techniques for Safely Hosting Untrusted Add-ins with the .NET Framework 2.0
When you develop your applications to run arbitrary code through an add-in model, you may inadvertently expose a user's computer to potentially dangerous code. Learn how your applications can safely host untrusted add-ins with the .NET Framework 2.0.
http://go.microsoft.com/?linkid=4080376

Developer Best Practices and Guidelines for Applications in a Least Privileged Environment
From the Windows Vista Developer Center: Understanding User Account Protection in Microsoft Windows Vista Beta 1 - Windows Security Access Control.
http://go.microsoft.com/?linkid=4080377

Stop SQL Injection Attacks Before They Stop You
Armed with advanced server-side technologies like ASP.NET and powerful database servers such as Microsoft® SQL Server™, developers are able to create dynamic, data-driven Web sites with incredible ease. But the power of ASP.NET and SQL can easily be used against you by hackers mounting an all-too-common class of attack—the SQL injection attack.
http://go.microsoft.com/?linkid=4126355
 
Stay Alert: Use Managed Code to Generate a Secure Audit Trail http://go.microsoft.com/?linkid=4080378
 
Application Development Security Guidance for .NET 2.0 http://go.microsoft.com/?linkid=4080379

Top Stories

How Does Data Protection Work? http://go.microsoft.com/?linkid=4089223
Data Protection Manager (DPM) helps you manage the process of protecting and recovering data on the file servers in your network. This topic describes the high-level steps you need to perform to successfully protect and recover data in the DPM environment.

Case Study: DestiNY USA http://go.microsoft.com/?linkid=4089224
Read about how DestiNY, the world's first "retail city" teamed with Microsoft Services and deployed a secure extranet that incorporates Microsoft Windows Rights Management Services (RMS) with Service Pack 1 for Windows Server 2003.

Plant Floor Security Enables Peak Performance for Manufacturers http://go.microsoft.com/?linkid=4089225
Plant floor security vulnerabilities can be multiple and complex and can have serious consequences. Microsoft partners are taking equally multifaceted and deep approaches to solving these issues. Read about the three-fold approach to software security that Microsoft has implemented.

Security Guidance

Microsoft Security Guidance Center: Recently Published

http://www.microsoft.com/technet/security/recent/default.mspx

Security Tip of the Month: Rootkits: The Obscure Hacker Attack http://go.microsoft.com/?linkid=4089226
A rootkit is a special type of malicious software because it's hard to detect and you don't know what it is doing. The best strategy is to prevent a rootkit from getting into your system. But if it's too late for prevention, this article tells you how to identify rootkits and how to get rid of them.

Security Resources for Midsize Businesses http://go.microsoft.com/?linkid=4089227
Microsoft offers a range of powerful tools and resources that can help midsize businesses protect their systems and data. Find information about the latest security updates, recent incidents, and best practices.

Ten Steps to Help Keep Your Business Secure http://go.microsoft.com/?linkid=4089228
Virus protection is a two-stage process. First, you need to educate your users, and then you need to strengthen your network's security defenses. Review this checklist to see if your employees and systems are covered.

Learning Paths for Security http://go.microsoft.com/?linkid=4089229
Use these Learning Paths to find Microsoft training references and resources on security threats and appropriate countermeasures.

Rights Management Services Service Pack 1 Software Development Kit (SDK) http://go.microsoft.com/?linkid=4089230
The Microsoft Windows Rights Management Services (RMS) SDK can be used to create RMS applications that enforce terms of use for encrypted digital assets, regardless of the format or content.

Downloads

October 11, 2005 Enterprise Update Scan Tool (standalone version)
http://www.microsoft.com/downloads/details.aspx?FamilyID=e345b1ee-d131-450f-93f1-143b27bcbc39&DisplayLang=en
 
Extended Security Update Inventory Tool
http://www.microsoft.com/downloads/details.aspx?FamilyID=2c93da1d-48a0-4e5c-991f-87e08954f61b&DisplayLang=en
 
Microsoft® Windows® Malicious Software Removal Tool (KB890830)
http://www.microsoft.com/downloads/details.aspx?FamilyID=ad724ae0-e72d-4f54-9ab3-75b8eb148356&DisplayLang=en

Windows XP Security Guide
http://www.microsoft.com/downloads/details.aspx?FamilyID=2d3e25bc-f434-4cc6-a5a7-09a8a229f118&DisplayLang=en

patterns & practices Security Engineering Explained
http://www.microsoft.com/downloads/details.aspx?FamilyID=75039f39-b33a-4bbd-b041-cf25f7473a0b&DisplayLang=en

Events / Webcasts

Defense in Depth: Strategies to Help Secure Your Environment and Reduce Malware http://go.microsoft.com/?linkid=3939055
Our experts provide guidance and resources for understanding malware and the associated risks and for taking appropriate countermeasures using Microsoft and partner technologies. Tune in to all webcasts in this series and walk through the steps for malicious code planning, protection, detection, and response in your environment.

Security360: Learn Best Practices to Guide Your Security Strategy http://go.microsoft.com/?linkid=1772878
Each 60-minute webcast in this monthly series focuses on a specific security topic and includes commentary from industry experts outside of Microsoft.

Digital Blackbelt Series: Defend Your Code from Attacks http://go.microsoft.com/?linkid=1765766
Join Developer Community Champion Joe Stagner as he discusses security risks, vulnerabilities, and solutions from the software developer's perspective. You'll receive security tips and tricks that can help you gain the knowledge and techniques to become an experienced "blackbelt" in writing secure code.

Security Program Guide

Learn Security On the Job. Without Putting It On the Line http://go.microsoft.com/?linkid=4089262
Applying Microsoft Security Guidance with Hands-On Labs http://go.microsoft.com/?linkid=4089263
Extend your skills with standalone Security Virtual Labs http://go.microsoft.com/?linkid=4089264

Additional Live and On-Demand Webcast Series Available Now:
Ask the Security Experts http://go.microsoft.com/?linkid=1772880
Microsoft Windows XP Service Pack 2 http://go.microsoft.com/?linkid=1772895
Web Development http://go.microsoft.com/?linkid=1838899

Upcoming Security Webcasts

http://www.microsoft.com/events/security/upcoming.mspx

Register for the following Webcasts on the link above

TechNet Webcast: How Microsoft IT Implements Encryption Using SQL Server 2005 (Level 300)
November 1, 2005, 9:00 A.M.–10:00 A.M. Pacific Time

MSDN Webcast: Essentials of Application Security (Part 2 of 3) (Level 200)
November 1, 2005, 9:00 A.M.–10:00 A.M. Pacific Time

MSDN Webcast: Implementing Application Security Using the .NET Framework (Part 2 of 3) (Level 200)
November 2, 2005, 9:00 A.M.–10:00 A.M. Pacific Time

TechNet Webcast: A More Secure and Well-Managed Infrastructure (Part 6 of 18): Public Key Infrastructure (Level 300)
November 2, 2005, 9:30 A.M.–10:30 A.M. Pacific Time

TechNet Webcast: Configuring Exchange and VPN Connectivity Using ISA Server 2004 (Level 200)
November 2, 2005, 1:00 P.M.–2:30 P.M. Pacific Time

MSDN Webcast: Implementing Security at Design Time (Level 200)
November 4, 2005, 9:00 A.M.–10:00 A.M. Pacific Time

TechNet Webcast: A More Secure and Well-Managed Infrastructure (Part 7 of 18): Server and Network Security Configurations (Level 300)
November 4, 2005, 9:30 A.M.–10:30 A.M. Pacific Time

TechNet Webcast: Securing Business Solutions Based on SQL Server 2005 (Level 200)
November 9, 2005, 9:00 A.M.–10:30 A.M. Pacific Time

TechNet Webcast: A More Secure and Well-Managed Infrastructure (Part 8 of 18): Network Defense Using ISA 2004 (Level 300)
November 9, 2005, 9:30 A.M.–10:30 A.M. Pacific Time

TechNet Webcast: Secure Your Mission Critical Systems with ISA Server 2004 and Antigen for SMTP Gateways (Level 200)
November 9, 2005, 11:00 A.M.–12:30 P.M. Pacific Time

TechNet Webcast: Information About the Microsoft November Security Bulletins (Level 200)
November 9, 2005, 11:00 A.M.–12:00 P.M. Pacific Time

TechNet Webcast: A More Secure and Well-Managed Infrastructure (Part 9 of 18): Securing the Exchange Environment (Level 300)
November 11, 2005, 9:30 A.M.–10:30 A.M. Pacific Time

MSDN Webcast: Protecting Your XML-Based Data with XML Encryption (Level 300)
November 11, 2005, 11:00 A.M.–12:30 P.M. Pacific Time

MSDN Webcast: Implementing Security in the Development Life Cycle (Level 200)
November 14, 2005, 9:00 A.M.–10:00 A.M. Pacific Time

Microsoft Executive Circle Webcast: Security360 with Mike Nash: Integrating the Edge in Network Security (Level 200)
November 15, 2005, 9:00 A.M.–10:00 A.M. Pacific Time

MSDN Webcast: Microsoft ASP.NET and Web Services Security (Level 200)
November 15, 2005, 11:00 A.M.–12:00 P.M. Pacific Time

Small Business Webcast: Learn Why Microsoft Small Business Financials Is an Affordable, Flexible, and Reliable Accounting Solution (Level 100)
November 16, 2005, 9:00 A.M.–9:30 A.M. Pacific Time

MSDN Webcast: Practical Security for Internet and Extranet Solutions (Level 200)
November 16, 2005, 9:00 A.M.–10:00 A.M. Pacific Time

TechNet Webcast: A More Secure and Well-Managed Infrastructure (Part 10 of 18): Sybari Antigen Overview (Level 300)
November 16, 2005, 9:30 A.M.–10:30 A.M. Pacific Time

TechNet Webcast: Exchange Server 2003 in Depth (Part 7 of 14): Server Security (Level 200)
November 16, 2005, 11:30 A.M.–12:30 P.M. Pacific Time

MSDN Webcast: Using Secure Coding Best Practices (Level 200)
November 18, 2005, 9:00 A.M.–10:00 A.M. Pacific Time

TechNet Webcast: A More Secure and Well-Managed Infrastructure (Part 11 of 18): Secure Data Access with SQL (Level 300)
November 18, 2005, 9:30 A.M.–10:30 A.M. Pacific Time

TechNet Webcast: SQL Server 2005 Security Enhancements (Level 200)
November 22, 2005, 9:00 A.M.–10:30 A.M. Pacific Time

MSDN Webcast: Beating the Hacker by Protecting Your Code (Level 200)
November 22, 2005, 9:00 A.M.–10:00 A.M. Pacific Time

MSDN Webcast: Preventing Attacks at the Application Level: Misconfigurations and Administrative Errors (Level 300)
November 22, 2005, 11:00 A.M.–12:00 P.M. Pacific Time

MSDN Webcast: Preventing Attacks at the Application Level: Phishing and Session Hijacking (Level 300)
November 23, 2005, 11:00 A.M.–12:00 P.M. Pacific Time

MSDN Webcast: Writing Secure Code (Part 2 of 3): Threat Defense (Level 200)
November 28, 2005, 9:00 A.M.–10:00 A.M. Pacific Time

MSDN Webcast: Building Secure and Interoperable Web Services with WSE (Level 300)
November 28, 2005, 10:00 A.M.–11:00 A.M. Pacific Time

TechNet Webcast: Securing Exchange Servers Against External Threats with Antigen (Level 200)
November 28, 2005, 11:00 A.M.–12:30 P.M. Pacific Time

TechNet Webcast: Inside Application Layer Filtering (Level 300)
November 29, 2005, 11:00 A.M.–12:30 P.M. Pacific Time

On-Demand Security Webcasts

http://www.microsoft.com/events/security/ondemand.mspx

Additional Security Resources

Security Help and Support for IT Professionals http://go.microsoft.com/?linkid=4089281
New and Improved Microsoft TechNet Troubleshooting and Support Page  http://go.microsoft.com/?linkid=4089282
Microsoft Security Glossary http://go.microsoft.com/?linkid=4089283
Preview Microsoft SQL Server 2005 http://go.microsoft.com/?linkid=4089284
New Microsoft Windows Security Resource Kit, Second Edition http://go.microsoft.com/?linkid=4089285
TechNet Security Web Site http://go.microsoft.com/?linkid=4089286
MSDN Security Developer Center http://go.microsoft.com/?linkid=4089287
Sign-Up for the Microsoft Security Notification Service http://go.microsoft.com/?linkid=4089288
Security Bulletin Search Page http://go.microsoft.com/?linkid=4089289
Home Users: Protect Your PC http://go.microsoft.com/?linkid=4089290
MCSE/MCSA: Security Certifications http://www.microsoft.com/traincert/mcp/mcsa/mcsa_mcse.asp
Subscribe to TechNet http://go.microsoft.com/?linkid=4089291
Register for TechNet Flash IT Newsletter http://www.microsoft.com/technet/abouttn/subscriptions/flash_register.mspx
Subscribe to MSDN http://go.microsoft.com/?linkid=4089292

Security Blogs

Steve Riley http://go.microsoft.com/?linkid=4089266 RSS http://go.microsoft.com/?linkid=4089267
Jerry Bryant http://go.microsoft.com/?linkid=4089268 RSS http://go.microsoft.com/?linkid=4089269
Michael Howard http://blogs.msdn.com/michael_howard RSS http://blogs.msdn.com/michael_howard/Rss.aspx
Brian Johnson http://go.microsoft.com/?linkid=4089270 RSS  http://go.microsoft.com/?linkid=4089271
Eric Lippert http://go.microsoft.com/?linkid=4089272 RSS http://go.microsoft.com/?linkid=4089273
Ivan Medvedev http://go.microsoft.com/?linkid=4089274 RSS http://go.microsoft.com/?linkid=4089275
Jesper Johansson http://blogs.technet.com/jesper_johansson/default.aspx RSS http://blogs.technet.com/jesper_johansson/rss.aspx

Windows Platform

News

Storage Resource Manager Available in Windows Server 2003 R2
Windows Server 2003 R2, an update release of the Windows Server 2003 operating system, now includes Storage Resource Manager. Built on Windows Server 2003 with Service Pack 1, the release specifically offers improved branch office management, identity and access management, and storage management. It requires a new server license and is available for purchase through the same channels as Windows Server 2003.
http://www.microsoft.com/windowsserver2003/R2/default.mspx

Windows Server 2003 R2
Learn more about Windows Server 2003 R2, which is currently available for evaluation as a release candidate.
http://www.microsoft.com/windowsserver2003/r2/default.mspx

TechNet Virtual Lab: Windows Server 2003
In this virtual lab, you'll have the opportunity to road-test new and improved features and functionality of Windows Server 2003, including performance, management, and usability enhancements to Microsoft Active Directory. In addition, hands-on labs provide guidance in scripting, Rights Management Services (RMS) and more.
http://www.microsoft.com/technet/traincert/virtuallab/windowsserver2003.mspx

Changes to IPv6 in Windows Vista and Windows Server "Longhorn"
The October 2005 Cable Guy article describes the changes to the IPv6 protocol and the Teredo transition technology in Windows Vista and Windows Server "Longhorn" (now in beta testing).
http://www.microsoft.com/technet/community/columns/cableguy/cg1005.mspx

Documents

Windows Vista Product Overview
Windows Vista advancements in security and reliability, along with its cost and operational efficiencies, give you and your users confidence in your company PCs. With Windows Vista, users have clear ways to organize and view their information, which enables them to focus on the most important aspect of their jobs. Windows Vista communication, mobility, and networking features keep users connected to people, information, and devices. Combined, these benefits bring clarity to your world and to the world of your end users.
These capabilities make Windows Vista a great operating system solution for your company PCs. From the perspective of an IT professional, Windows Vista is easier to deploy, and less expensive to maintain, than any earlier version of Windows. From the perspective of end users, Windows Vista's improved performance and reliability add value by allowing people to be more effective while performing their jobs.
http://www.microsoft.com/technet/windowsvista/evaluate/overvw.mspx

Version 2.1 of the Windows XP Security Guide Now Available
The Microsoft Solutions for Security and Compliance (MSSC) team is proud to announce the release to Web version 2.1 of the Windows XP Security Guide. This version of the Windows XP Security Guide was updated to provide additional security guidance for:
• Maintaining different levels of security and control on Windows XP client computers.
• Securing Windows XP client computers that are not members of an Active Directory domain.
• Security settings for computers that must function reliably in extremely critical roles in high security environments.
http://www.microsoft.com/downloads/details.aspx?FamilyId=2D3E25BC-F434-4CC6-A5A7-09A8A229F118&displaylang=en

MIIS 2003 Capacity Planning
This guide describes how different server configuration options affect the performance of MIIS 2003. The configuration options discussed are: processors (quantity and speed), database location, memory, disks and network.
http://www.microsoft.com/downloads/details.aspx?FamilyID=db1b13be-bd0f-4a92-8907-f4b2674f701a&DisplayLang=en

ADFSstepbystep
This document provides prescriptive guidance for testing Active Directory Federation Services (ADFS) in a lab environment.
http://www.microsoft.com/downloads/details.aspx?FamilyID=062f7382-a82f-4428-9bbd-a103b9f27654&DisplayLang=en

Overview of Active Directory Federation Services (ADFS) in Windows Server 2003 R2
This document provides overview information about Active Directory Federation Services (ADFS).
http://www.microsoft.com/downloads/details.aspx?FamilyID=8a4ccaf1-d55e-4129-8a5f-97093a48fd3d&DisplayLang=en

Print Management Step-by-Step Guide
Print Management is a Microsoft Management Console (MMC) snap-in that enables you to install, view, and manage all of the printers in your organization from any computer running Windows Server 2003 R2.
http://www.microsoft.com/downloads/details.aspx?FamilyID=83066ddc-bc96-4418-a629-48c8abd2c7a0&DisplayLang=en

ADAM Step-by-Step Guide
This document is a step-by-step guide for deploying Active Directory Application Mode (ADAM).
http://www.microsoft.com/downloads/details.aspx?FamilyID=5163b97a-7df3-4b41-954e-0f7c04893e83&DisplayLang=en

Downloads

Update for Windows XP x64 Edition (KB907865)
Install this update to address multiple issues in the IPSec Policy Agent. The IPSec Policy Agent (IPsecsvc.dll) manages Internet Protocol security policy. After you install this item, you may have to restart your computer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=58080d8e-4553-405f-8b2b-d72ce9ff55ee&DisplayLang=en

Update for Windows XP (KB907865)
Install this update to address multiple issues in the IPSec Policy Agent. The IPSec Policy Agent (IPsecsvc.dll) manages Internet Protocol security policy. After you install this item, you may have to restart your computer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=86512452-96dc-415a-a1d9-fd42e62af5a8&DisplayLang=en

Update for Windows Server 2003 64-bit Itanium Edition (KB907865)
Install this update to address multiple issues in the IPSec Policy Agent. The IPSec Policy Agent (IPsecsvc.dll) manages Internet Protocol security policy. After you install this item, you may have to restart your computer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=fe50d4b0-7751-4caf-b879-bc4eeb645b8c&DisplayLang=en
 
Update for Windows Server 2003 (KB907865)
Install this update to address multiple issues in the IPSec Policy Agent. The IPSec Policy Agent (IPsecsvc.dll) manages Internet Protocol security policy. After you install this item, you may have to restart your computer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=e3059748-62dc-4ef2-a0d3-ecdaa5f572ed&DisplayLang=en
 
Update for Windows Server x64 Edition (KB907865)
Install this update to address multiple issues in the IPSec Policy Agent. The IPSec Policy Agent (IPsecsvc.dll) manages Internet Protocol security policy. After you install this item, you may have to restart your computer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=ac6b5be3-e9ba-4b3b-a9f9-d65a82cf364c&DisplayLang=en

Active Directory Migration Tool v3.0
The Active Directory Migration Tool version 3 (ADMT v3) simplifies the process of restructuring your operating environment to meet the needs of your organization. You can use ADMT v3 to migrate users, groups, and computers from Microsoft® Windows NT® 4.0 domains to Active Directory® directory service domains; between Active Directory domains in different forests (interforest migration); and between Active Directory domains in the same forest (intraforest migration). ADMT v3 also performs security translation from Windows NT 4.0 domains to Active Directory domains and between Active Directory domains in different forests.
http://www.microsoft.com/downloads/details.aspx?FamilyID=6f86937b-533a-466d-a8e8-aff85ad3d212&DisplayLang=en

Microsoft Windows Server Update Services Operations Guide
Comprehensive guidance on the major tasks involved in administering and troubleshooting Microsoft Windows Server Update Services (WSUS), including synchronization and managing computers and computer groups, as well as viewing, approving, testing, and storing updates, and running reports.
http://www.microsoft.com/downloads/details.aspx?FamilyID=e26bcdb4-ef0b-4399-8a71-9b3b00c4f4cd&DisplayLang=en

Application Compatibility Toolkit 4.1 Now Available
Application Compatibility Toolkit (ACT) 4.1 contains new categories for reporting application issues including applications with no data and applications with no known issues. In addition, ACT 4.1 addresses a number of reliability and performance issues.
http://www.microsoft.com/technet/prodtechnol/windows/appcompatibility/default.mspx

Update for Windows XP (KB904412)
Install this update to address several possible issues associated with connecting a Serial Bus Protocol 2 (SBP-2) device, such as an IEEE 1394 device, to a Microsoft Windows XP Service Pack 2-based computer. After you install this item, you may have to restart your computer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=a2091337-a0ea-4b34-b19f-b6ec04c1f2d2&DisplayLang=en

Update for Windows XP (KB906569)
Install this update to add a Tools tab to the System Configuration Utility (msconfig.exe). The Tools tab will allow further diagnostic tools to be launched from within the System Configuration Utility. After you install this item, you may have to restart your computer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=9689f6e9-aded-44b8-bbbb-beae1b4a4bc9&DisplayLang=en

Update for Windows 2000 (KB904368)
Install this update to resolve an issue in which Microsoft Office programs may stop responding when you try to save new files to a floppy disk drive after installing Update Rollup 1 for Windows 2000 Service Pack 4. After you install this update, you may have to restart your computer.
http://www.microsoft.com/downloads/details.aspx?FamilyID=6d8b0194-85cb-40df-8346-910be4ddcbbc&DisplayLang=en

Microsoft Windows Server Base Operating Systems Management Pack for Microsoft Operations Manager 2005
This Management Pack monitors the health, availability, and performance of your Windows Server operating systems (10/20/2005).
http://www.microsoft.com/downloads/details.aspx?FamilyID=E553062F-BD85-4772-8037-8B91F457B710&displaylang=en

Update for Windows 2000 (KB820608)
Install this update to resolve an issue in Windows 2000 that restricts the functionality of the Exchange Best Practices Analyzer (ExBpa) tool. This tool is used to diagnose issues in an Exchange environment. After you install this item, you may have to restart your computer. Once you have installed this item, it cannot be removed.
http://www.microsoft.com/downloads/details.aspx?FamilyID=ce021902-0a9b-4957-82ed-d77bcd4c83e6&DisplayLang=en

Microsoft Management Console 3.0 Pre-Release (Based on Windows Server 2003 R2 RC0).
MMC 3.0 (formerly MMC 2.1) ships as a component in Windows Server 2003 R2 and Windows Vista, and continues to be the host for a variety of OS and 3rd party admin tools.
http://www.microsoft.com/downloads/details.aspx?FamilyID=8760a789-160e-4dec-a1b9-3bbc49fa12e5&DisplayLang=en

User Profile Hive Cleanup Service
A service to help with slow log off and unreconciled profile problems.
http://www.microsoft.com/downloads/details.aspx?FamilyID=1b286e6d-8912-4e18-b570-42470e2f3582&DisplayLang=en

Webcasts

TechNet Support WebCast: Configuring subnets for Active Directory sites in Windows Server 2003 - Level 300
Thursday, November 03, 2005: 10:00 A.M. Pacific time (Coordinated Universal Time - 7 hours). 

Discusses how to configure subnets for Active Directory sites in Microsoft Windows Server 2003. Discusses IP subnets and subnetting, Active Directory sites, and configuring subnets in Active Directory Sites and Services.
http://support.microsoft.com/default.aspx?kbid=909429 

TechNet Webcast: Planning and Deploying the Branch Office Technologies in Windows Server 2003 R2 (Level 300)
Thursday, November 10, 2005 - 9:30 AM - 10:30 AM Pacific Time

Dan Boldo, Program Manager, Microsoft Corporation
This webcast covers the essential elements that you must include in your planning and implementation of a branch office deployment. Learn to identify the key requirements that can influence your design through usage scenarios and an emphasis on the most effective ways to apply the branch office technologies in Microsoft Windows Server 2003 R2. These technologies include distributed file system (DFS) namespaces, DFS replication, DFS management tools, DFS diagnostics tools, and the Microsoft Operations Manager 2005 Management Pack. You will also gain an understanding of how important a test plan that is based on usage requirements is to a successful deployment. This webcast concludes with a survey of the tools and best practices that can help you to successfully deploy branch offices.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032283985&Culture=en-US

TechNet Webcast: Understanding Windows Hypervisor and Virtualization in Windows Vista (Level 200)
Thursday, November 10, 2005 - 1:00 PM - 2:30 PM Pacific Time
Mike Neil, Product Unit Manager, Microsoft Corporation
This webcast provides a technical overview of the Microsoft Windows hypervisor, a technology that allows more than one operating system to run on the same computer. The Windows hypervisor is the foundation of the Windows virtualization solutions from Microsoft that are planned for release with Microsoft Windows Vista (formerly code named “Longhorn”). Join this webcast for an in-depth look at the hypervisor and related input/output virtualization layers.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032284285&Culture=en-US

TechNet Webcast: Successfully Implementing a Complex Active Directory Design (Level 200)
Monday, November 21, 2005 - 11:30 AM - 1:00 PM Pacific Time
Kevin Remde, TechNet Presenter, Microsoft Corporation
This webcast provides best practices that you can apply to more complex, less common deployments of Microsoft Active Directory. Two examples of complex Active Directory designs are several forests that are connected by trusts, and organizational domain structures. You will learn why you might need a more complex design and how to avoid pitfalls while controlling the costs of your deployment.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032284225&Culture=en-US

TechNet Webcast: Technical Overview of DNS in Windows Server 2003 (Level 200)
Tuesday, November 22, 2005 - 9:30 AM - 11:00 AM Pacific Time
Kevin Remde, TechNet Presenter, Microsoft Corporation
This webcast begins with a quick overview of Domain Name System (DNS) in Microsoft Windows Server 2003 and its associated terminology. We then cover name resolution, zones, caches, and Time To Live. Next we move on to the subject of installing and configuring one DNS server. We discuss the different types of zones and settings, such as scavenging, that help manage the server. With our one server installed, we consider how to add more servers, the types of servers we can add, and how to replicate and delegate.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032284231&Culture=en-US

TechNet Webcast: Active Directory Remote Administration Tools (Level 200)
Tuesday, November 22, 2005 - 11:30 AM - 1:00 PM Pacific Time
Chris Henley, TechNet Presenter, Microsoft Corporation
Join this webcast to learn about the improvements to Microsoft Active Directory in Microsoft Windows Server 2003. We will focus on functionality at the domain and forest levels and explain what you should consider as you design and plan a branch office environment. You will learn from an example of how to deploy a domain controller to support a remote branch office that is connected over a wide area network (WAN) link. We will also learn about command-line tools and graphical user interface (GUI)-based tools that you can use to remotely manage Active Directory, including the Windows Management Instrumentation (WMI) command-line tools and others.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032284228&Culture=en-US

TechNet Webcast: Clustering and High Availability with Virtual Server 2005 R2 (Level 200)
Tuesday, November 22, 2005 - 1:00 PM - 2:30 PM Pacific Time
Mike Neil, Product Unit Manager, Microsoft Corporation
This webcast introduces you to the new clustering and high availability features in Microsoft Virtual Server 2005 R2. Features like guest clustering and host-based clustering can help you ensure a robust production server consolidation. This webcast also introduces you to third party products that you can use with Virtual Server 2005 R2 to ensure high availability.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032284290&Culture=en-US

TechNet Webcast: Working with the VHD File Format in Virtual Server 2005 (Level 300)
Tuesday, November 29, 2005 - 9:30 AM - 11:00 AM Pacific Time
Mike Neil, Product Unit Manager, Microsoft Corporation
Microsoft has set the Virtual Hard Disk (VHD) file format as the standard for running and managing virtual machines using Microsoft Virtual Server 2005. The VHD file format provides for a range of disk types, including dynamically expanding, linked, undo, and differencing disks. This webcast provides detailed information about the file format. In addition, you will learn about best practices and partner offerings in the areas of disk image management and migration.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032284292&Culture=en-US

TechNet Webcast: Get Ready for the New and Improved Microsoft Software Assurance Program (Level 200)
Tuesday, November 8, 2005 - 9:30 AM - 11:00 AM Pacific Time
David Smith, Senior Consultant, Entirenet
The Microsoft Software Assurance program provides you with the technologies, tools, support, and training that can help you deploy and use Microsoft software more efficiently. This webcast explores the improvements to the program that will soon be available and explains how get ready for it. Join this webcast to learn about the program’s new requirements, dependencies, system roles, tools, and service offerings.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032284161&Culture=en-US

TechNet Webcast: Windows Storage Server: An Overview (Level 200)
Wednesday, November 9, 2005 - 9:30 AM - 10:30 AM Pacific Time
Shola Aluko, Product Manager, Microsoft Corporation
This webcast explores the new advanced features in Microsoft Windows Storage Server R2 such as single instance storage, text search, replication, and server clustering. Learn how Windows Storage Server integrates seamlessly with existing infrastructures and heterogeneous environments by using the improvements in Windows Server 2003 R2.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032284381&Culture=en-US

TechNet Webcast: Evaluating Novell Open Enterprise Server (Level 100)
Tuesday, November 15, 2005 - 11:30 AM - 12:30 PM Pacific Time
Gregory Marshall, Program Manager, Microsoft Corporation
Do you currently use Microsoft Windows NT 4.0 or Novell NetWare? Are you evaluating which platform will best meet your infrastructure needs in the coming years? If so, you have probably heard about various Linux options, including Novell Open Enterprise Server. To help you better understand Open Enterprise Server and how it relates to Netware, this webcast provides an in-depth examination of the product, as well as demonstrations. You will come away from this webcast knowing what factors to consider when you decide whether to include Open Enterprise Server as part of your mission-critical architecture.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032284003&Culture=en-US

Events

15-17 November 2005, IT Forum 05, Barcelona, Spain
Microsoft IT Forum 2005: Three days or learning, one year of solutions! This year promises to be a huge event that offers over 325 unique learning and update sessions, Hands-on Labs, Chalk-&-Talks and Panel Discussions. Explore the latest and soon-to-be launched Microsoft products; engage with outstanding speakers, network with your peers and get your questions answered by Microsoft experts. Built on three supporting key pillars: Technical Education, Community & Networking and Technology Evaluation; Microsoft IT Forum gives you three full days of intense briefings on virtually every aspect of planning, deploying and managing your Microsoft enabled infrastructure. It truly is an event not to be missed! Visit the website now to learn more about the event and try your luck at the Free Ticket Competition.
http://www.mseventseurope.com/msitforum/05/pre/content/default.aspx

3 November, Reading: TechNet Briefing: Active Directory Fundamentals and Administration
In this session we will cover some of the basic concepts of the Active Directory. We will look at what a directory service is and the benefits Active Directory offers, the logical concepts as they relate to Domain, Trees and Forests. As well as the physical concepts of Domain Controllers and Sites. We will also explain the relationship between the Active Directory and the Domain Naming Service.
http://www.microsoft.com/uk/technet/training/events.mspx#EEA 

Internet

News

ISA Server 2004 achieves Common Criteria Level EAL 4+ for security.

Microsoft Internet Security and Acceleration (ISA) Server has achieved CC Evaluation Assurance Level 4+ (EAL 4+). Level 4 is the highest level possible that is mutually recognized by all countries participating in CC certification. This level provides the deepest evaluation and testing possible from an independent testing laboratory. In addition, ISA Server passed an even more thorough review, earning Level 4+. You can find the supporting resources and documentation on this page. This CC certificate assures you that the evaluated security features of ISA Server Standard Edition are effective and implemented correctly.

http://www.microsoft.com/isaserver/techinfo/deployment/commoncrit.mspx

Webcasts

ISA Server 2004 Maximize Application Security and Performance.

Whether you plan to upgrade to Internet Security and Acceleration (ISA) Server 2004 or want to learn how to get the most from your current ISA deployment, this series of technical webcasts illustrates how ISA 2004 can help you maintain a secure and performance-driven network. Tune in as our experts explain how to use ISA Server 2004 to improve network security without sacrificing performance. You'll also learn more about partner solutions designed to extend the capabilities of ISA Server in areas such as anti-virus and content filtering.

http://www.microsoft.com/events/series/isaserversecurity.mspx

TechNet Webcast: High Availability Architecture with Microsoft.com Operations (Level 200)
Monday, November 7, 2005 - 11:30 A.M. - 1:00 P.M. Pacific Time
Chris AdA.M.s, ProgrA.M. Manager, Microsoft Corporation
Hear from the Microsoft.com Operations system engineers who operate the highest-scale Microsoft Internet Information Services solutions on the Internet, including www.Microsoft.com, Windows Update, MSDN/TechNet, Downloads, and more. These experienced engineers share their Web hosting secrets for high availability architectures, including the areas surrounding network security, cluster and host-level load balancing, and Web and database server distributions.
http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032283678&EventCategory=4&culture=en-US&CountryCode=US

TechNet Webcast: Configuration Management of Web Farms with Microsoft.com Operations (Level 200)
Tuesday, November 8, 2005 - 9:30 A.M. - 11:00 A.M. Pacific Time
Chris AdA.M.s, ProgrA.M. Manager, Microsoft Corporation
Get one-on-one interaction with the Microsoft.com Operations senior system engineers responsible for running www.Microsoft.com and Windows Update to see how they perform scripted administration and deployment of configuration settings across the infrastructure. In this webcast, the engineers show sample scripts and provide visibility into how they leverage various commands to be released with Microsoft Windows Server 2003 and Microsoft Internet Information Services 6.0.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032283692&Culture=en-US

TechNet Webcast: Finding IIS Bottlenecks using Server Performance Advisor (Level 200)
Tuesday, November 8, 2005 - 11:30 A.M. - 12:30 P.M. Pacific Time
Chris AdA.M.s, ProgrA.M. Manager, Microsoft Corporation
Microsoft Internet Information Services (IIS) has been a "black box" for many versions now. Have you had the urge to open it up? IIS 6.0 on Microsoft Windows Server 2003 delivers a strong infrastructure for finding problems with Web applications. Using Microsoft Windows Server 2003 Enterprise Tracing for Windows (ETW), the Server Performance Advisor (SPA) can compile statistical data on your Web applications for later review. This webcast covers the basics around SPA and ETW and looks at how to set up, configure, and analyze the data collected by SPA.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032280403&Culture=en-US

TechNet Webcast: Change and Release Management Strategies with Microsoft.com Operations (Level 200)
Wednesday, November 9, 2005 - 11:30 A.M. - 1:00 P.M. Pacific Time
Chris Adams, Program Manager, Microsoft Corporation
The Microsoft.com Operations team provides pointers on how you can effectively manage your software updates, providing examples from the team's experience with operating system deployments, service pack releases, and security updates. This webcast also covers the approach that Microsoft.com Operations takes to application releases. You will learn about the strategies that the team uses to work with the product development teams across Microsoft including developers, testers, and program managers.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032283694&Culture=en-US

TechNet Webcast: Monitor and Manage an Enterprise Platform with Microsoft.com Operations (Level 200)
Thursday, November 10, 2005 - 11:30 A.M. - 1:00 P.M. Pacific Time
Chris Adams, Program Manager, Microsoft Corporation
Partner with the senior engineers at Microsoft.com Operations to learn how they manage over 2,000 servers running Microsoft Windows 2000 Server in three remote data centers. This webcast describes how the Microsoft.com Operations team uses a suite of technologies and operational processes for asset management, performance data collection and reporting, and system and application level uptime analysis. This session also describes how Microsoft.com uses Microsoft Active Directory and Microsoft Operations Manager for server management.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032283907&Culture=en-US

TechNet Webcast: Troubleshooting and Debugging Web Hosting Environments with Microsoft.com Operations (Level 300)
Friday, November 11, 2005 - 11:30 A.M. - 1:00 P.M. Pacific Time
Chris Adams, Program Manager, Manager, Microsoft Corporation
Dive under the hood with our senior system engineers at Microsoft.com Operations to learn how they troubleshoot and debug hosted Microsoft ASP.NET applications and database-driven systems. This webcast provides real-life examples that explain how to use popular tools such as LogParser, Server Performance Advisor, Performance Monitor, and Network Monitor. The webcast also includes some common procedures that you can use when these tools fail to help you find the root cause of a problem.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032283696&Culture=en-US

TechNet Webcast: Using Host Headers with SSL-Enabled Web Sites in IIS 6.0 (Level 200)
Tuesday, November 29, 2005 - 11:30 A.M. - 1:00 P.M. Pacific Time
Chris Adams, Program Manager, Manager, Microsoft Corporation
According to Microsoft Knowledge Base, using host headers with Secure Sockets Layer (SSL) enabled Web sites in Microsoft Internet Information Services (IIS) is not supported. With IIS 6.0 and Microsoft Windows Server 2003 Service Pack 1 (SP1), however, IIS can now host multiple Web sites (virtual servers) using the same IP address and unique host headers. This webcast describes the minimum requirements necessary to use this SP1 feature and also explains how to configure it. Follow along as the presenter shows you how to use wildcard certificates to enable you to use host header sites with SSL.
http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032280958&Culture=en-US

Downloads

SharePoint Portal Server 2003 SP 2

SharePoint Portal Server 2003 SP 2 is now available for download
http://www.microsoft.com/downloads/details.aspx?FamilyID=171dc9a7-b4ba-4759-bd64-6b7d851a97ef&DisplayLang=en.

New KB’s

Internet Information Services

Systems that have changed the default Access Control List permissions on the %windir%\registration directory may experience various problems after you install the Microsoft Security Bulletin MS05-051 for COM+ and MS DTC
On a computer that is running Microsoft Windows XP, Microsoft Windows 2000, or Windows Server 2003, one or more problems may occur after you install the critical update that is discussed in Microsoft Security Bulletin MS05-051
http://support.microsoft.com/default.aspx/kb/909444

Host Integration Server

Users may not be able to print 3270 print jobs through the SNA Print service in Host Integration Server
http://support.microsoft.com/?kbid=905396

Windows Media Services 9 Series

Users in some users groups experience problems when the users try to access the performance counters for Windows Media Services 9 Series on Windows Server 2003
http://support.microsoft.com/?kbid=907508

BizTalk

You may receive a "The following platform components failed to install and will need to be manually installed before setup can proceed Enterprise Single Sign-On Server" error message when you try to install BizTalk Server 2004
http://support.microsoft.com/?id=905725

You may receive a "Failed to load configuration data for feature: Runtime" error message when you run the Configuration Wizard for BizTalk Accelerator for RosettaNet 3.0
http://support.microsoft.com/?id=905729

The Tracking_Spool1 or Tracking_Spool2 tables in the BiztalkMsgBoxDb database become very large in BizTalk Server 2004
http://support.microsoft.com/?id=907661

FIX: An "Enterprise Single Sign-On is offline" error message may be logged in the Configuration log when you try to use the "Configframework /s" command to silently reconfigure BizTalk Server 2004
http://support.microsoft.com/?id=904168

You must run the Configuration Wizard when you move an installation of BizTalk Server 2004 from one domain to another domain
http://support.microsoft.com/?id=904356

SharePoint

Description of Microsoft Office SharePoint Portal Server 2003 Service Pack 2
http://support.microsoft.com/?id=887623

Issues that are fixed in SharePoint Portal Server 2003 by SharePoint Portal Server 2003 Service Pack 2
http://support.microsoft.com/?id=906337

How to address the case where SPS SP 2 does not updated the databases during service pack installation
http://support.microsoft.com/?id=907377