Browse by Tags

• access control
• Active Directory
• authentication
• BitLocker
• configuration
• encryption
• false claims
• group policy
• IPsec
• NAP
• networking
• physical security
• protection
• public policy
• security policies
• security theater
• SSL/HTTPS
• TechEd
• the trade press
• things that make me angry
• things that make me laugh
• VPN

Directly connect to your corpnet with IPsec and IPv6

Contrary to popular belief, the rumors of my demise have been greatly exaggerated. Well, ok, no actual rumors, but hey, one can dream, huh? My spring calendar was full of events in Asia and Australia, then TechEd US seemed to suddenly appear out of nowhere! Read More...

Posted 25 June 08 01:55 by Steve Riley | 26 Comments   
Filed under Windows Vista, NAP, authentication, TechEd, Active Directory, configuration, VPN, IPsec, networking, BitLocker, encryption, group policy, SSL/HTTPS

Plan now to eliminate "power users" from your domains

I've seen some conversations lately about the Power Users group -- how powerful is it, really, and why did we remove the group from Windows Vista? That group had rights install software and drivers. And if you can install software and drivers, then you Read More...

Posted 11 February 08 10:03 by Steve Riley | 1 Comments   
Filed under Windows Vista, authentication, security policies, access control

Changing the SSL cipher order in Internet Explorer 7 on Windows Vista

Recently, the question of using AES for SSL has come up in the newsgroups and at some conferences. When IE makes an HTTPS connection to a web server, it offers a list of cipher supported cipher suites. The server then selects the first one from the list Read More...

Posted 06 November 07 09:37 by Steve Riley | 13 Comments   
Filed under Windows Vista, configuration, encryption, group policy, SSL/HTTPS

The bad guys will use BitLocker, too

Got an email today from a customer asking about how BitLocker will affect the ability of law enforcement to conduct forensic analysis of a protected hard drive. Specifically, the person was asking about any back doors that law enforcement could use to Read More...

Posted 13 July 07 11:03 by Steve Riley | 14 Comments   
Filed under Windows Vista, security theater, public policy, BitLocker, encryption

Windows Integrity Mechanism: more than you ever wanted to know

A while back, the technology in Vista called mandatory integrity control got a new name: Windows integrity mechanism. Recently the folks responsible for developing the technology have posted a good amount of documentation on it. Read the Windows Vista Read More...

Posted 13 July 07 10:49 by Steve Riley | 0 Comments   
Filed under Windows Vista, protection

TechNet: Exploring the Windows Vista Firewall

New article up... Back in the days of the paleocomputing era, no one ever thought about installing firewalls on individual computers. Who needed to? Hardly anyone had heard of the Internet, TCP/IP was nowhere in sight, and LAN protocols didn’t route beyond Read More...

Posted 29 May 07 04:01 by Steve Riley | 1 Comments   
Filed under Windows Vista, security theater, protection

Curious about the ways Windows talks to the Internet? Here's your answer.

I was browsing through the Microsoft download pages today -- yeah, even we employees occasionally find little nuggets interspersed among the usual updates and such. I noticed a pair of whitepapers that will answer a common question I hear from many of Read More...

Posted 20 December 06 03:32 by Steve Riley | 1 Comments   
Filed under Windows Vista, configuration, networking

BitLocker command line interface

Last week at TechEd Europe I showed the BitLocker command-line interface. At other TechEds I've mentioned it but didn't show it. The CLI provides full control over BitLocker, including enabling it on any NTFS volume on the system (the Control Panel UI Read More...

Posted 25 November 06 08:39 by Steve Riley | 15 Comments   
Filed under Windows Vista, protection, physical security, configuration, BitLocker, encryption

Must be a slow news day: reporter writes 100% crap

Imagine my surprise to read that Microsoft is removing NAP from Windows Vista ! Does this guy actually get paid money to write this drivel? The particular folks quoted in the article all have their own agendas, of course. News flash: we aren't dropping Read More...

Posted 03 October 06 11:12 by Steve Riley | 6 Comments   
Filed under Windows Vista, NAP, false claims, the trade press, things that make me angry, things that make me laugh

Ah, the joys of speaking about pre-release software!

Two weeks ago I delivered my Windows Vista System Integrity presentation at the TechEds in New Zealand (Auckland) and Australia (Sydney). It was largely the same as the presention at TechEds in America and India, but updated to reflect changes made in Read More...

Posted 06 September 06 02:26 by Steve Riley | 4 Comments   
Filed under Windows Vista, the trade press, protection, TechEd

Security in Windows Vista 64-bit

By now, many of you have heard us speak about or have read our writings on the improved security capabilities of Windows Vista. As I've said at a number of events now, the research I've done into these capabilities has convinced me that enterprises should Read More...

Posted 11 August 06 04:17 by Steve Riley | 1 Comments   
Filed under Windows Vista, false claims, protection

Mandatory integrity control in Windows Vista

One of my favorite new security features in Windows Vista is Mandatory Integrity Control (MIC). It’s a classical computer science concept from the 1970s that’s finally getting its first commercial implementation—and of this I’m quite proud. While discretionary Read More...

Posted 21 July 06 09:20 by Steve Riley | 27 Comments   
Filed under Windows Vista, protection, TechEd

Search

This Blog

• Home
• About
• Email

Tags

• access control
• access technologies
• Active Directory
• advertising
• assessing security
• authentication
• aviation security
• biometrics
• BitLocker
• blogging
• conferences and seminars
• configuration
• data destruction
• email
• encryption
• false claims
• group policy
• home and family security
• identity
• infosec as a profession
• integrity
• Internet Explorer
• IPsec
• ISA Server
• malware
• music
• my book
• NAP
• networking
• passwords
• patch management
• physical security
• protection
• public policy
• risk mitigation
• RMS
• security myths
• security policies
• security science
• security theater
• spam
• SSL/HTTPS
• TechEd
• Terminal Server
• the end
• the future
• the trade press
• things that make me angry
• things that make me laugh
• things that make me worried
• threats
• virtualization
• VPN
• Windows 7
• Windows Vista
• wireless

Archives

• August 2009 (1)
• May 2009 (1)
• February 2009 (1)
• January 2009 (5)
• December 2008 (1)
• November 2008 (1)
• October 2008 (2)
• September 2008 (6)
• August 2008 (2)
• June 2008 (2)
• April 2008 (1)
• February 2008 (7)
• January 2008 (1)
• November 2007 (1)
• October 2007 (3)
• September 2007 (5)
• August 2007 (2)
• July 2007 (4)
• May 2007 (2)
• April 2007 (1)
• February 2007 (1)
• January 2007 (3)
• December 2006 (2)
• November 2006 (3)
• October 2006 (2)
• September 2006 (6)
• August 2006 (1)
• July 2006 (3)
• June 2006 (1)
• May 2006 (2)
• April 2006 (2)
• March 2006 (5)
• February 2006 (2)
• January 2006 (3)
• November 2005 (5)
• September 2005 (4)
• August 2005 (2)
• July 2005 (5)
• June 2005 (5)
• April 2005 (3)
• March 2005 (2)
• February 2005 (2)
• January 2005 (1)

Syndication

• RSS 2.0
• Atom 1.0