• Windows Vista Bitlocker Preparation Tool for Enterprise Customers

    With Windows Vista Ultimate you can download an Ultimate Extra, the Bitlocker Disk Preparation Tool (BDEHDCFG), which is very handsome. However, as an Enterprise customer - for Windows Vista Enterprise Edition, you can request the tool also through Premier Support or Customer Support:

     http://support.microsoft.com/kb/930063

    To encrypt drives and to verify boot integrity, BitLocker requires at least two partitions. These two partitions make up a split-load configuration. A split-load configuration separates the main operating system partition from the active system partition from which the computer starts.

    The BitLocker Drive Preparation Tool automates the following processes to make the computer ready for BitLocker:
    Creating the second volume that BitLocker requires
    Migrating the boot files to the new volume
    Making the volume an active volume
    When the tool finishes, you must restart the computer to change the system volume to the newly created volume. After you restart the computer, the drive will be configured correctly for BitLocker. You may also have to initialize the Trusted Platform Module (TPM) before you turn BitLocker on.

    Urs

     

  • WP: Behavioral Modeling of Social Engineering-Based Malicious Software

    Ok, it's not brand new, but I want to share it with you anyway. I found it more or less by accident, so, probably many of you haven't seen this either...short and informational!

     A White Paper from the Microsoft Antimalware Team
    This paper will provide examples of poignant social engineering ‘exploits’ over the past few years and attempt to construct a model, using telemetry from Microsoft’s Windows Malicious Software Removal Tool, that can predict the prevalence of a specific social engineering threat based on its characteristics and appeal to the user.

    http://www.microsoft.com/downloads/details.aspx?FamilyID=e0f27260-58da-40db-8785-689cf6a05c73&displaylang=en

    Urs

     

  • Windows Vista and UAC prompts

    Michael Howard has a funny entry on his blog that sounds really known to me, just the short excerpt out of it:
    http://blogs.msdn.com/michael_howard/archive/2007/02/08/uac-bs.aspx

    Xx: What's new? Things going well with you?
    Me: Excellent, we shipped Vista. Yay!
    Xx: It’s ok.
    Me: Waddya mean?
    Xx: Too ‘noisy’?
    Me: Waddya mean?
    Xx: too many pop-ups.
    Me: Like what?
    Xx: UAC stuff
    Me: When do you see the pop-ups?
    Xx: all the time
    Me: When?
    Xx: When I do stuff
    Me: Like what?
    Xx: everything!
    Me: like when? I probably get two prompts a day – and that’s only ‘coz I do geeky stuff. Gimme specifics
    Xx: like right when I logon
    Me: we suppress prompting on logon/startup, and fail the app load, you will see no prompts as you logon.
    Xx: oh.
    At this point Xx had a sheepish look...

    Perception != Reality.

    That's exactly what I hear a lot: Many complaints about UAC, but if I drill down on specific examples... nothing! 
    I have the feeling that there is a lot more noise about UAC, then from UAC!
    Of course this is a version 1.0 implementation, but we have done a lot of optimization just to get the right balance between security and usability.

    Urs

  • ISA Server 2006 Firewall Client advanced multi network feature

    This very good article describes and explains a very common scenario that I've seen a cuple of times in customer environments:

    http://www.isaserver.org/tutorials/Advanced-ISA-Firewall-Configuration-Network-Behind-Network-Scenarios.html

    Urs

     

  • ISA Server 2006 HTTP filter configuration (walk through)

    A good introduction to the ISA Server 2006 HTTP application filter on the ISASERVER.ORG website:

    http://www.isaserver.org/tutorials/Configuring-ISA-Server-2006-HTTP-Filter.html

    Urs