Welcome to TechNet Blogs Sign in | Join | Help
IE 8 localized Enterprise and IT Pro Guidance

Just letting you know there is updated localized guidance for IE 8 in Simplified Chinese, French, German, Hindi, Japanese, Portuguese (Brazilian), Russian, and Spanish (Traditional).  Unless noted, you use the “Change Language” pop-up menu in the Quick Details blue block to choose the language for downloading the paper.

Here are the following documents which are available:

  • Internet Explorer 8 Deployment Guide (link)
    • Use the menu in the upper-right corner of the page to change the language
    • The guide is also available in Hindi. Given TechNet does not support Hindi, we have created a CHM (Compiled HTML Help File) that you can download or distribute to customers. To access, open the “IE8Deploy” CHM file stored here. Note: the Table of Contents is in English due to CHM limitations.
  • Internet Explorer Administration Kit (IEAK) 8 documentation (link)
    • Previously localized as part of IEAK download, and now available on the Web. (No IEAK documentation in Hindi because there is no Hindi IEAK.) 
  • “Techniques for Preinstalling Windows Internet Explorer 8” whitepaper (link)
  • “Windows Internet Explorer 8 FAQ for Business” whitepaper (link)
  • “Windows Internet Explorer 8 Technology Overview for Enterprise and IT Pros” whitepaper (link)
Mark Russinovich interview in Berlin

I interviewed Mark Russinovich again (see my 1st interview with him in his office the future of Sysinternals, Security, Windows) at TechEd EMEA in Berlin.  This time we chatted about the new tools coming out from Sysinternals like the Disk2VHD tool, what features in Windows 7 are security and which ones are not, and Windows 7 performance enhancements.

Get Microsoft Silverlight

The original post to download the various file formats (Zune, iPod, etc) can be found at:
Mark Russinovich interview at TechEd EMEA 09

Windows Mobile 6.5 Released

Windows Mobile 6.5 launched today, now being referred to in short as “Windows phone” moving forward.  Some of the key benefits I see from the consumer side are listed below.  I posted a detailed text post on TechNet Edge which describes the business value of Windows Mobile phones for IT Pros.

  • Microsoft My Phone - a new service that offers free automatic backup and online access to phone contacts, calendar, texts, photos, browser favorites and more. In select markets, My Phone also offers a Premium Package that helps users find, lock or erase a lost device.
  • Windows Marketplace for Mobile - a new marketplace with fun and useful high-quality mobile applications to install right from your phone.
  • Upgraded touch user interface - that was designed for finger touch and the ability to cut through clutter to accomplish what you want. In my experience using WM 6.5, it is much better at touch gestures, but the shortfall is some of the menu items were not designed optimally with fingers in mind.  The “Today” and “Start Menu” pages work great with and were clearly designed for your finger.
  • Updated web browser – Internet Explorer mobile has been updated to allow easier operation using touch gestures with an enhanced pan/zoom and also has Adobe Flash for watching videos on the web.
  • I’ve been using my HTC Fuze with WM 6.5 on it since March 2009 and have overall been pretty happy with it.  I’m looking forward to what we come up with for Windows Mobile 7, which I imagine will be an even better for usability and “fun” as a consumer.

    Office 2010 Web Applications

    I did an interview with Chris Bryant who gave me a cool tour of the new Office Web applications. Finally an answer to Google Docs. I’m looking forward to using these!

    Get Microsoft Silverlight
    Windows Firestarter Event

    On September 18th you can attend locally or interact live via Live Meeting to learn about some of the core information you want to know about the next wave of Windows products – Windows 7 and Windows 2008 R2.  I will presenting a session on IE 8 focused on IT Pros and consumer (since us IT Pros are consumers too). I look forward to seeing or hearing from you!

    To see the agenda and register for the event, go to this website:
    http://www.technetevents.com/firestarter/index.html

    Forefront Protection (vs Online) for Exchange – FPE vs FOPE

    In this interview with Mike Chan, I help clarify when you might want to utilize Forefront Protection for Exchange versus Forefront Online Protection for Exchange – or use both.  Most of the video is spent white boarding out how things work between FPE / FOPE and Exchange 2010’s security.

    Get Microsoft Silverlight
    Remove Active Partition

    I couldn't find any good search results on how to remove an active partition on a Windows system (and this is not in the disk management GUI) and eventually figured this out on my own, so I thought I'd share.  Of course, this is only useful if you have a drive which no longer contains an operating system / boot files and you just want to remove the flag.    The solution is simply the command-line tool "diskpart" which resides in the windows\system32 directory and the Inactive command. the active command marks it for active, which can also easily be done in the disk management UI.

    DISKPART> help inactive

        On disks with master boot record (MBR) disk formatting, marks
        the partition with focus as inactive.

    Syntax:  INACTIVE

        The computer may start from the next option specified in the BIOS such as a
        CD-ROM drive or a Pre-Boot eXecution Environment (PXE)-based boot
        environment (such as Remote Installation Services (RIS)) when you restart
        the computer.

        A partition must be selected for this operation to succeed.

        Caution:

            Your computer might not start without an active partition. Do not mark
            a system or boot partition as inactive unless you are an experienced
            user with a thorough understanding of Windows storage management.

    Save TechNet Library content offline

    Ever wanted to not have to scroll through endless expansions of bite-sized content on the TechNet library and just download a document of only the content you want instead?  I know this has been frustrating for me in the past and when I brought it up to a TechNet manager he said “you can already do this”.  To my shock, I asked how since it isn’t visible anywhere within the TechNet library… 

    The ”Package This” tool is a piece of software you can download from CodePlex which will allow you to accomplish this.  You have to make sure you have the .Net 2.0 framework and MS Help installed, but it is well worth the time to have offline searchable files.

    This is a picture of the user interface where you select the content you want to package:

    PackageThis

    After you select what you want, you can then Export it into a CHM file!

    Windows7DeploymentCHM

    XP-Mode vs App-V vs Med-V vs VDI

    There are so many virtualization options available from Microsoft, which one do you use when?  We cleared this up in a short interview and addressed how these options might help you remediate your legacy applications over to Windows 7.  Also, we just launched the XP to Windows 7 Migration process guide with the announcement of Windows 7 and Server 2008 R2 RTM yesterday which will further clarify these options and give you links to deeper resources on each subject.

    Get Microsoft Silverlight

    Visit the original post on TechNet Edge which has links to the other 4 videos in the series

    Office 2010 Demo and Interview for IT Pros

    I interviewed Ralf on the Office 2010 team who showed a demo of some of the cool new features in Word and Outlook 2010 as well as answered some relevant questions for IT Pros – now that the Technical Preview is out there we can show it.  The full breakdown of the interview is at the original post text on Edge.  Check it out.

    Get Microsoft Silverlight
    Silverlight Enterprise Deployment Guide v2 available

    I finished creating the Silverlight deployment guide awhile ago, but after a number of reviews, revisions, and updates it is finally available for download.  This guide is applicable to all versions of Silverlight, including Silverlight 3.  The idea was that the guide would have a long life beyond SL 3 without revisions, while areas needing updated (i.e. version history, group policy settings) will continue to evolve on the Silverlight administration page.

    Version 1 of the Silverlight deployment guide was geared at only the 1st release of Silverlight and didn’t include all of the improved windows update methods included with Silverlight 2.  Some of the changes I’ve made to this document are:

    • New sections for deployment using WSUS, SCCM, and manual advertisement
    • Version table with the update ID numbers for Update rollup / Feature pack
    • Updated text surrounding making a choice for deployment
    • Updated logic and text around Silverlight’s built-in auto-updater
    • Updated add-on section for IE 8

    Download Silverlight Deployment Guide v2

    ADMX policy missing or blank - bug

    When you create a policy with a custom ADMX template which uses a registry key outside of the standard 4 recommended locations (below) and open up your group policy editor using gpedit.msc, the policy will not be listed and you will get no error. The workaround is to use the group policy editor which comes with the group policy management console (i.e. right click on a policy in the GPMC.msc and choose edit).  This one wasted a bunch of my time wasted, so hopefully you don’t have to go through the same.

    Recommended Group policy locations:

  • HKLM\Software\Policies (computer settings, the preferred location)
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Policies (computer settings, an alternative location)
  • HKCU\Software\Policies (user settings, the preferred location)
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Policies (user settings, an alternative location)
  • One other note - this bug appears to have already been fixed in Win7 & Server 2008 R2.

    Silverlight Installation Switches

    Below is a list of all of the Silverlight 1, 2, and 3 installation switches available and their description.  This will be included in the Silverlight Enterprise Deployment guide v2 which I’m writing - to be released soon.  In the mean time, here they are for your assistance:

    The Silverlight install executable file has a number of different switches to customize the installation. The syntax of the setup file is as follows:

    Silverlight<version>.exe

    /q = quiet install or upgrade.  This installs or upgrades Silverlight without seeing the GUI.  When Silverlight is installed quietly, by default privacy related features such as DRM protected media playback and the Silverlight auto-update feature will be configured to prompt the user for permission on 1st use of the respective features. The Silverlight auto-update feature requires administrative rights so non-admin users will not be prompted.

    /doNotRequireDRMPrompt = turns off the 1st use prompt allowing DRM Playback without requiring any end-user intervention. This setting is automatically included when the quiet install switch is used. By default, DRM Playback is set to prompt on 1st use.

    /ignorewarnings = non-fatal warnings will not be reflected in the quiet installer return code but will instead return zero indicating success. This is useful if in testing or custom installation software requires a zero return code.

    /noupdate = disables the Silverlight internal auto-updater. The Silverlight auto-updater requires administrative rights, so in environments where users have admin rights this switch may be used to prevent administrative users from being prompted to install updates if you want to control when updates to Silverlight are distributed.  Group policy can also be used to implement this setting via a custom ADMX (see Silverlight Deployment Guide)

    /qu = quiet uninstall. This uninstalls Silverlight without seeing the GUI. Note: This will only uninstall the exact same version that it installed, so is typically only useful for testing scenarios.

    Note: The /doNotRequireDRMPrompt and /ignorewarnings switches are only available with the version of Silverlight 2 GDR 2 (KB 960353 / 2.0.40115.0) or later.

    IE 8 ClickJacking and security PM interview

    I interviewed Kymberlee Price, IE security PM responsible for future research with ClickJacking.  She gives us insight into what research the team is doing in this area as well other great insights into IE security.

    Get Microsoft Silverlight

    For a complete breakdown of the contents of the interview, please view this post on TechNet Edge. Also, you can check out a great post Kymberlee wrote about ClickJacking on the IE blog.

    Why should an IT Pro care about IE 8?
    Below is a list of the top 5 technical reasons why you should care about deploying Internet Explorer 8 now - and also some reasons why IE 8 is better than Firefox/Chrome.  Original article published on Edge here
    1. More Productivity – Get things done and browse faster and easier.  Microsoft gathered a huge amount of data to understand how people use the browser and the tasks they accomplish. IE 8 is designed out-of-the-box to help get tasks accomplished quicker along with an overall increase in browser performance and reliability.  Webslices and Accelerators are innovations you’ll want which no other browser have.

      • Performance – Overall page load times are faster than IE 6/7.  Also, IE performs faster than Chrome or Firefox loading the entire page on half of the top 25 websites.

      • Reliability – If a tab crashes, only the tab will crash – not the entire browser.  Easily recover all of your tabs/sessions in the unlikely event of the entire browser crashing.  Chrome does tab isolation, Firefox does session recovery, IE 8 is the only one to do both.

      • Search – Automatically get more than just text visual search suggestions while you type along with a history of your previous searches for your favorite search plug-in such as Live search, Google,  Facebook, or Wikipedia.  Additionally, get a history of your previously visited websites and favorite sites as you type in the address bar.

      • Accelerators – Highlight text on a webpage and in one click do things like get a map of an address, define a word, send an email, do a search, share on a social networking site, or translate text into another language.  Your company might develop a custom accelerator or find one of the existing ~100 which help your users.

      • Webslices – Get a small “slice” visual update for frequently updating content such as stock quotes, traffic, ebay auctions, and weather - dropped down from the browser favorites bar.  Your company might also develop a custom webslice or find one of the existing ~30 which might help your users.

    2. Better Security – Don’t let leave your company at a higher risk by using a competing browser or an older version of IE.  IE is the best browser at protection from malware and were the 1st to innovate with far more security and privacy enhancements than I can list below.

      • Smart Screen Filter – protects you against evolving threats.  Cross Site Scripting (XSS) is the most common class of software vulnerability and IE 8 protects you against type 1 “reflective” XSS attacks. Phishing and malware protection is enhanced to be more effective over IE 7. IE 8 is currently the only browser on the market to protect you against click-jacking vulnerabilities.
      • In-Private Filtering – gives an added level of control and choice about the information 3rd- party websites can potentially use to track browsing activity.

      • Per-Site and Per-User Active X controls – allows the lockdown of individual Active-X controls to a specific site or user(s), therefore significantly reducing the attack surface for Active-X controls, minimizing your risk.

      • Domain Highlighting – automatically highlights the owning domain of whatever site you’re currently viewing. This helps users identify the real site they’re on when a website attempts to deceive them.

    3. Granular Management – IE is the only browser which gives you the complete control to lockdown and fine tune features via group policy.  There have been over 100 group policy settings added, bringing the total to ~1,400 policies (xlsx file) which allow you to easily control how you'd like to run IE in your environment. 

    4. Easy to Deploy – IE is the only browser on the market which allows the customization of the initial install package and gives you the support to deploy with so many options.  IE 8 can be easily deployed using Windows Update, WSUS, SMS, SCCM, group policy, a network folder or even quickly slipstreamed into your existing Vista images. Furthermore, the Internet Explorer Administration Kit (IEAK) 8 allows customization of the installation package and builds upon the functionality and feedback received from IEAK 7. 

    5. Easy to Migrate – With the capability to emulate IE7 on the browser and websites having the capability to force IE 8 into IE 7 mode with a simple piece of HTML code, there should be little reason to not move from IE 7 to IE 8 while maintaining compatability with your existing sites.  IE 8 is embracing open standards for browsing and will continue to do so; in the long run making it easier for developers and IT Pros to do fewer testing with their web applications and upgrades, such as future generations of IE.  Additionally, there are some great resources to help with your migration:

    Download IE 8 RTM

    Attend locally or virtually the 1-day IE 8 Firestarter event March 26th

    More Posts Next page »
    Page view tracker