<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.technet.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Services isolation in Session 0 of Windows Vista and Longhorn Server</title><link>http://blogs.technet.com/voy/archive/2007/02/23/services-isolation-in-session-0-of-windows-vista-and-longhorn-server.aspx</link><description>You may have heard that built-in services in Windows Vista were specifically hardened by Microsoft engineers during its development process. You might be wondering what that really means, how it works and, if you are a developer, how to harden your own</description><dc:language>en</dc:language><generator>CommunityServer 2.1 SP1 (Build: 61025.2)</generator><item><title>re: Services isolation in Session 0 of Windows Vista and Longhorn Server</title><link>http://blogs.technet.com/voy/archive/2007/02/23/services-isolation-in-session-0-of-windows-vista-and-longhorn-server.aspx#1388224</link><pubDate>Fri, 29 Jun 2007 00:19:20 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:1388224</guid><dc:creator>ChrisK</dc:creator><description>&lt;p&gt;A little disturbing, &lt;/p&gt;
&lt;p&gt;So you are saying that processes that may have worked under a windows service may not anymore. I may have to revert to having a server that is logged on as a user through Pcanywhere, and have an app manage the batch process through that means. &lt;/p&gt;
&lt;p&gt;From a organization that uses Unix Vax Windows (older Widnows os) to do batch processing, and you could accomplish just about anything you needed to do with those environments in the Windows envronment you will not be able to accomplish those things in a appropriate batch style using services.&lt;/p&gt;
&lt;p&gt;For instance the most extreme: Screen scraping, windows style apps, web sites which offer no other way or data exchangeing. Other apps like ipswiches ftp pro. would fail with this type of batching correct? Telnet tools that paint windows and scrap there way though pages. Monarch (report processing software) that displays itself currently from the batch service will no longer run? &amp;nbsp;I guess I will have to test all the weird stuff I do? ----- I think that the risk should be left to the purchasing organization. Because it is a server OS, not a desktop OS.&lt;/p&gt;
&lt;p&gt;But since the group I work in (Integration), we do anything that is asked of us, and we try to make the impossible happen, I guess we would have to revert to having a user account logged on all the time and apps (not services which it should be for a batch scheduler) manage the batched processes.&lt;/p&gt;
&lt;p&gt;Maybe a better solution, (one that Microsoft could capitalize on), would be a version of Windows that is dedicated to what my group does (taking risks and making things work in a Windows World with out a user automatically). I guess you made job more challenging.&lt;/p&gt;
&lt;p&gt;Regards, I hope I did not vent too much,&lt;/p&gt;
&lt;p&gt;Chris&lt;/p&gt;
</description></item><item><title>Windows 2008/vista service hardening</title><link>http://blogs.technet.com/voy/archive/2007/02/23/services-isolation-in-session-0-of-windows-vista-and-longhorn-server.aspx#2834770</link><pubDate>Wed, 06 Feb 2008 03:35:00 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:2834770</guid><dc:creator>The Security Wizard</dc:creator><description>&lt;p&gt;From the cold winter of Seattle, i&amp;amp;#39;ve managed to gather a small bunch of guides that explain the&lt;/p&gt;
</description></item></channel></rss>