• Windows XP Service Pack 3 Overview

    Windows XP Service Pack 3 (SP3) includes all previously released updates for the operating system. This update also includes a small number of new functionalities, which do not significantly change customers’ experience with the operating system. This white paper summarizes what is new in Windows XP SP3.

    http://www.microsoft.com/downloads/details.aspx?FamilyID=68c48dad-bc34-40be-8d85-6bb4f56f5110&displaylang=en

    Urs


     

  • Windows Server 2008 Security Guide released

    The Windows Server 2008 Security Guide provides customers with best practices, predefined security templates, and an automated deployment tool to help strengthen the security of servers running Windows Server 2008.  The security recommendations in the guide are based on the combined experience of Microsoft security experts, customers, partners, and governments worldwide.  

    The guide comes with two preconfigured security baselines: 

    Enterprise Client: This security baseline is best for the majority of organizations in which functionality is evenly balanced with security.

    Specialized Security – Limited Functionality:  This baseline is best for organizations in which concern for security is so great that a significant loss of functionality is acceptable. For example, military and security agency organizations operate in this type of environment.

    Both baselines have been thoroughly tested in Microsoft labs, and validated by Microsoft customers and partners under real-world conditions. You can easily tailor the security baseline you choose, modifying individual security settings to accommodate your organization’s environment and unique needs. The guide also includes a powerful GPOAccelerator tool that helps you quickly establish, test, and automatically deploy a configuration of Group Policy security settings across your organization—in minutes, instead of hours or days.

    Technet Security Guide page: http://technet.microsoft.com/en-us/library/cc300311.aspx

    Urs

     

  • The First Step on the Road to More Secure Software is admitting you have a Problem

    Michael Howard on SDL and the need for it; comments onJeff Jones blogs.

    See SDL blog:
    http://blogs.msdn.com/sdl/archive/2008/02/21/the-first-step-on-the-road-to-more-secure-software-is-admitting-you-have-a-problem.aspx

    Urs

     

  • Windows Server 2008 Resource Kit

    Last Friday the last of the Windows Server 2008 Security Resource Kit finally went to press! This was a project I had not really planned and so, to complete it in time, I brought in an amazing crew of co-authors. Together, we managed to put together 17 chapters on how to manage security in one of the most exciting products this year.

    See Jesper Johanssons blog post:
    http://msinfluentials.com/blogs/jesper/archive/2008/02/14/resource-kit-done.aspx

    Urs

     

  • 'Out of office' messages turned into spam relays

    Spammers have found a new trick that gets around many current anti-spam filters: abusing the "out of the office" auto-respond feature found in legitimate webmail services.

    http://www.techworld.com/security/news/index.cfm?newsID=11544

    Urs