Jesper's Blog

Obligatory file photo:
I am a Senior Security Strategist in the Security Technology Unit at Microsoft. My job is to explain to our customers how to run Microsoft products securely, and to the extent that it is needed, help the product groups figure out how to make it possible to do so. I am a frequent speaker at conferences and custom workshops around the world, particularly in places that lend themselves to great diving.

March 2006 - Posts

Server and Domain Isolation Tech Center

posted Wednesday, March 22, 2006 3:22 PM by jesper

Maybe you are not quite as behind the times as I am, but I just found out that there is a new Server and Domain Isolation (yes, that is the correct word order) Tech Center at http://www.microsoft.com/sdisolation. Server and Domain Isolation is certainly Read More

3 Comments

Some organizations put too much emphasis on hardening guidance

posted Tuesday, March 21, 2006 11:50 AM by jesper

I have been working on hardening guidance for almost 10 years. The first few I worked on were essentially lists of settings that we thought you should turn on. Basically, if something sounded like it might have to do with security then it must be turned Read More

5 Comments

New Taped Presentations Available

posted Tuesday, March 21, 2006 9:02 AM by jesper

The Europeans have put up a couple more presentations from IT Forum 2005. There is a tape of my Is That Application Really Safe demos, as well as the Security Policy Management with SCW. They also put up Jason Zions' Unix/Linux Authentication with Read More

1 Comments

Power Users are Admins who have not made themselves admins yet

posted Sunday, March 12, 2006 11:32 PM by jesper

It seems kind of odd that in 2006 I would still get these questions, but twice in the past week have I had to explain the truth about Power Users to someone. Typically they are organizations who are trying to limit the rights of their users, who right Read More

12 Comments

Security is a confidence building exercise

posted Thursday, March 09, 2006 3:11 PM by jesper

Yesterday I was at a community event in Canberra, well, actually, it was in the middle of nowhere in New South Wales, but that's beside the point. One of the issues that came up there was how to sell security to senior management. Having struggled with Read More