Welcome to TechNet Blogs Sign in | Join | Help

Browse by Tags

All Tags » Security   (RSS)

SCT is changing its name

The next version of the most excellent Shared Computer Toolkit for Windows XP (did we mention it is provided at no charge?) The new name will be Windows Steady State, due out early summer. SteadyState makes it easy for people managing shared computers

Zero Day Excel Exploit

Check the Security page for information on a zero day Excel exploit under investigation. They posted Microsoft Security Advisory (932553) . Communicate the suggested actions ASAP: Send your home users to the Protect Your PC Web site . • Customers who
Posted by tonyso | 0 Comments
Filed under: ,

Patch your smartphone for DST 2007

KB 923953 " How to configure daylight saving time for the United States and Canada in 2007 and in subsequent years on Windows Mobile-based devices " *helps* you patch up your smartphone to deal with the upcoming DST change. WARNING: the fix is a reghack,
Posted by tonyso | 0 Comments
Filed under: , ,

How Microsoft IT Does Patch Management

My old team - IT Showcase - packages up great information for IT Pros on how IT works at Microsoft. For the latest on how Microsoft IT does patch management, see: The latest PPT presentation and the earlier SMS PPT . And/Or you can read the 1 pager .
Posted by tonyso | 0 Comments
Filed under: , ,

Improve Virtual Server Networking

Check out the Microsoft Scalable Networking Pack (KB912222) for ways to improve the networking performance of certain workloads and configurations in your virtual server environment. Caveats: 1) you must have supported HW - the KB states "This feature

Using the RDP Console session

My team has access to a Windows Server 2003 server in the test organization that is built daily/weekly by script with the new product bits. In order to meet our content deadlines, we need to run the GUI as it changes during product development and try
Posted by tonyso | 0 Comments

How to Handle 0 Day Response

The Microsoft.com operations blog has a fantastic post here describing how they put together a VBscript to check servers for the MyDoom.B Virus when it first came out. This is a case study on things you can do in the ops room to put out the fire. Worth
Posted by tonyso | 0 Comments
Filed under: , ,

How Microsoft IT Does Patch Reporting

The screen shot below shows an example of a production report for Microsoft IT patching, clipped from this PPT from IT Showcase . It is from the Microsoft IT main hierarchy a couple of weeks after Patch Tuesday. It uses an SMS 2003 Web dashboard, derived
Posted by tonyso | 2 Comments
Filed under: , ,

Home Office Security Checklist

Any day Microsoft publishes a checklist that will make the life of the IT Pro easier is a good day. Good day - please pass on the Home Office Security Checklist to your users, and encourage them to take the steps therein. It will reduce your headaches
Posted by tonyso | 0 Comments
Filed under: , ,

New Phishing Attacks

Educate your users and friends/family...Microsoft never sends patches (updates) in an e-mail. According to Techweb today, a couple of Trojans are posing as Microsoft patches/updates . The first line of the spoofed e-mail "Microsoft Cooporation" [sic]
Posted by tonyso | 0 Comments
Filed under: ,

Xray that iffy site with URL Tracer, block the typo-squatters

Microsoft Research has released one of its Strider tools, URL Tracer . Security Watch says it "reveals all of the links beneath a given URL. This allows you to see what third-party domains are being linked to from within a given site, possibly links to
Posted by tonyso | 0 Comments
Filed under: , ,

New Microsoft Security Blog to Watch

Keep an eye on the new Jeff Jones Security Blog . Great new post On Disingenuous Analysis and Transparency from a guy who's CV looks like: Security engineer doing risk assessments for the Air Force and Orange Book evaluation work for the NSA . Kernel
Posted by tonyso | 0 Comments
Filed under: ,

Phish Hooks Study

This BBC article claims in a recent study 40% of users failed to spot phony bank phishing websites. The most sophisticated site caught out 90% of the 22 people participating. Here's their advice for you users to avoid getting hooked: Check the address
Posted by tonyso | 0 Comments
Filed under: ,

MBSA 1.2 Lives on

CNET reports today that MBSA 1.2.1 will not be retired today as previously announced. The most current version of MBSA is 2.0 , but there are core technology and functionality differences between the two versions, and some customers gave feedback they
Posted by tonyso | 0 Comments
Filed under: , ,

NEW Antigen site on TechNet

The Antigen TN site is live, althought the download link takes you to Sybari and requires registration information. Antigen is a server-level antivirus, anti-spam and content filtering solutions that helps businesses protect their e-mail and collaboration
Posted by tonyso | 0 Comments
Filed under: , ,
More Posts Next page »