An Ignoble Experiment: Security

Showing posts with label Security. Show all posts

2006/05/05

Short Takes

Labels: Apple, Business, Developer, Google, Microsoft, Music, News, Security, Software, Technology, Yahoo

WinInfo Short Takes

An often irreverent look at some of the week's other news, including Microsoft's big cash outlay in the coming year, a renewed emphasis on original content at MSN, Microsoft's search efforts, ABC's Web-based TV shows, Apple's music contracts and much more...

Subscribe to Windows IT Pro: http://list.windowsitpro.com/t?ctl=2942F:610453

====================

To ensure that future email messages you receive from WinInfo Daily UPDATE aren't mistakenly blocked by antispam software, be sure to add WinInfo_UPDATE@list.windowsitpro.com to your list of allowed senders and contacts.

====================

This email newsletter comes to you free and is supported by the following advertiser, which offers products and services in which you might be interested. Please take a moment to visit this advertiser's Web site and show your support for WinInfo Daily UPDATE.

Microsoft http://list.windowsitpro.com/t?ctl=29430:610453

==== Sponsor: Microsoft ====

IT Manager Connections Webcast Series from Microsoft Check out the brand new series specifically designed for IT Managers. May and June Webcast content includes Value of Integrated Platform-- Framework and tools to evaluate and manage your current environment and plan for the next 3 years; Vista/Office 2007/Exchange 12 will be highlighted; IT and Business Alignment--How to achieve strategic alignment between IT and business goals and how to advocate IT value across teams; IT Governance--Proven best practices to achieve better security and compliance through effective IT Governance. The series features third-party experts and industry analysts. Their perspective combined with Microsoft IT manager peer expertise will prove very relevant to enable IT Managers to build business and build careers on Microsoft Platform. Register today at http://list.windowsitpro.com/t?ctl=29430:610453

==== In the News ====

WinInfo Blog

Short Takes - Ballmer: Follow the Money - Fool Me Once, Shame on You; Fool Me Twice, You're MSN - Ballmer: Microsoft's Search Engine Makes Big Gains - "The New York Times" Picks Microsoft Software for Electronic Newspaper - Microsoft to Support 1394b "After" Vista - Yahoo! Launches Tech Site - ABC Launches Free Web-Based TV Shows - Amazon Jumps Ship From Google to Microsoft - Apple Renews Contract with Record Labels - RIM Sued for Patent Infringement ... Again - Napster Goes Free Again ... Sort Of - Open Document Format Gets Standardized

==== WinInfo Blog ====

by Paul Thurrott, thurrott@windowsitpro.com

I went to New York this week for a Microsoft reviewers workshop. That's not notable per se, but for some reason I hadn't been to the Big Apple in over a year, which is unprecedented. I used to go there quite frequently. Actually, I had to go to Brooklyn, and because of the schedule--early morning train to the event Thursday and then a late train home tonight--I'm not actually going to get to see anyone while I'm here. Sort of a bummer.

In my absence from New York, I really missed using the Acela Express, which is the northeast corridor's high-speed train. It gets you from Boston to New York in less than three and a half hours and it's pretty comfortable. That said, the ride was bumpier than I remember. I was trying to use a mouse with the laptop, but it was jumping all over the place.

A bit of advice, which should be obvious but wasn't to me for some reason: Putting contact lenses in while a train is moving is foolish.

==== Short Takes ====

An often irreverent look at some of the week's other news

by Paul Thurrott, thurrott@windowsitpro.com

Ballmer: Follow the Money

In the week or so following Microsoft's mysterious revelation about billions of dollars of additional spending in the coming fiscal year, there have been a lot of conspiracy theories about a war with Google, aliens, and Eliot Spitzer. (Actually, Mr. Spitzer never came up.) On Thursday, Microsoft CEO Steve Ballmer finally shed some light on where the money is going. He said the company will invest $1.1 billion in MSN and $6.2 billion in research and development, and that the company will push adoption of its MSN adCenter and Windows Live services. "A global infrastructure is not inexpensive," Ballmer said, noting the obvious. But here's the kicker: "Our number one priority is software as a service." Interesting.

Fool Me Once, Shame on You; Fool Me Twice, You're MSN

Speaking of MSN, Microsoft's erstwhile Google competitor has gone through several iterations. First, it was a traditional (pre-Internet) online service designed to compete with CompuServe. Then, it was a hip online destination and service, with a darker-than-Johnny Cash UI and Windows 98 integration. In its third and most reviled guise, however, MSN briefly became a content creator, with Microsoft foisting such ill- advised Web experiences as "Mungo Park" on its users. Those days are largely laughed about today, in the same way that we might make fun of such other ill-advised products as Microsoft Bob or the Halo 2 Soundtrack (the latter of which, inexplicably, includes little actual music from the game). Anyway, history has repeated itself, and not in a good way: This week, Microsoft revealed that it's once again making MSN a Web content creator. Seriously, I'd be happier with a return to the Johnny Cash MSN interface, which I actually kind of miss.

Ballmer: Microsoft's Search Engine Makes Big Gains

And speaking of Steve Ballmer, Microsoft's CEO also had some positive spin for MSN Search, which will soon give way to Windows Live Search and probably about 17 other services that combine the words "MSN," "Windows," "Live," and "Search" in a variety of ways. Speaking at an annual MSN conference, Ballmer said that inhouse search technology had made huge gains over the past two years (from a technical standpoint, presumably: MSN Search has actually lost ground to Google in the past year from a usage standpoint). It's pretty clear that MSN and Microsoft Research have come up with some compelling technology. It's not as clear whether anyone will ever notice, however.

"The New York Times" Picks Microsoft Software for Electronic Newspaper

"The New York Times" will use a feature in Windows Vista to deliver an electronic version of its newspaper that duplicates the look of the paper-based publication. Although readers can already access the contents of the paper online in a Web browser, Times publisher Arthur Sulzberger, Jr., said that Vista's XML Paper Specification (XPS) software would let the company publish the paper electronically in a version that duplicates the paper experience. The effect is actually kind of interesting: The upcoming eTimes, as I call it, looks exactly like the paper, with the same typefaces and columnar layout. It's not clear whether customers will have to pay for the eTimes, though the company will charge advertisers to appear within its virtual pages. The eTimes will debut around the same time as Vista.

Microsoft to Support 1394b "After" Vista

An upcoming version of the IEEE 1394 specification--which everyone except Microsoft refers to as FireWire--will provide increased transfer rates between PCs and devices at speeds of up to 3.2GB per second, far faster than the current speeds of 400 and 800Mbps that today's FireWire devices attain. Although Microsoft plans to support the new spec, dubbed 1394b, it won't do so until after Vista ships. Microsoft says it might add 1394b support to Windows in a Vista service pack or in a future version of Windows.

Yahoo! Launches Tech Site

Online giant Yahoo! this week launched a new technology site-- creatively titled Yahoo! Tech--that provides information about "personal technology" or what we might simply call gadgets. It's unclear why we need yet another gadget site--it seems like the identical Engadget and Gizmodo blogs pretty much sewed up that market years ago--but Yahoo! does offer some unique features, including top picks from "Consumer Reports," content from "PC World" and "PC Magazine," and links to other Yahoo! Web services. Gosh, it all sounds so exciting. Apparently, there's a gadget thing happening out there. I was just waiting for a conglomerate like Yahoo! to tell me all about it.

ABC Launches Free Web-Based TV Shows

ABC this week launched a Web site that provides free streaming versions of its hit TV shows "Alias" and "Lost" online. The site provides only the latest episode of each show and is designed so hard-core fans can see a show they might have missed earlier in the week. Visually, the streaming versions are decent, offering more than twice the resolution of the $1.99 iTunes TV show downloads offered by Apple. On the flipside, you must watch the shows in a browser, online, and you have to sit through occasional advertisements. I applaud ABC for at least trying out Web-based TV shows, but I'd like to see the offerings expanded to include a fuller catalog of shows and previous episodes. Also, the option to download for offline viewing would be nice.

Amazon Jumps Ship from Google to Microsoft

In a somewhat surprising move, Amazon, one of the leading online retailers, this week canceled its contract with Google and moved to Microsoft's search technology. That means that Amazon users who search at its Web site will now be treated to search results provided by Windows Live Search. Technically, the searches are served by A9.com, Amazon's in-house search service. But A9 uses Windows Live Search behind the scenes, so this is a big (and rare) win for Microsoft in this arena. Amazon wouldn't criticize Google, but it's certainly telling when one of the Internet's most visited sites jumps ship like this.

Apple Renews Contract with Record Labels

I keep waiting for Apple Computer CEO Steve Jobs to issue a press release that consists solely of him laughing, but so far, Apple has been pretty quiet about its most recent news. After several months of negotiations with the four largest record companies, Apple has renewed its contracts with them, allowing its iTunes Music Store service to continue selling digital songs for 99 cents apiece. The record companies had lobbied for variable pricing, in which newer songs could cost more than older tracks, but Apple--or, more specifically, Steve Jobs--argued that such a move was "greedy" and would make services like iTunes less viable for consumers. Right or wrong, Jobs won, and although we might debate the decision, few could argue what this development really means: Apple is a powerful force in music today.

RIM Sued for Patent Infringement ... Again

Hot on the heels of a patent infringement lawsuit settlement, BlackBerry maker Research in Motion (RIM) finds itself, once again, facing another patent infringement lawsuit. Visto (which is partially owned by NTP, the company that previously sued RIM and won a $612.5 million settlement) sued RIM this week, alleging that RIM is infringing on four of its patents. Visto previously sued another company for similar reasons and won a $3.6 million verdict. RIM's in a bit of trouble here, because it will be difficult to change the BlackBerry online service to bypass Visto's patents. The word "settlement" comes to mind.

Napster Goes Free Again ... Sort Of

Napster this week returned to its roots, sort of, offering a limited free version of its online music service through its Web site. Typically, customers pay $9.95 to $14.95 a month for Napster's subscription services, or 99 cents a song for a la carte downloads. But now, anyone can stream full-quality songs from Napster's 2 million-plus track catalog for free via the Napster Web site. The catch? You can stream the same song only five times; after that, you'll have to pay for it or subscribe to one of the company's subscription services. As a way to discover new music, however, it's hard to beat. Napster might just be on to something. Interestingly, Napster offered the new Web- based feature only after reaching an agreement with record companies, which will be paid a small amount for each Web-based song stream.

Open Document Format Gets Standardized

While Microsoft is only beginning the process of getting its OpenXML document format standardized, OpenXML's chief rival, the Open Document Format (ODF), was standardized this week by the ISO. Supported by IBM and Sun Microsystems, ODF seeks to usurp the pervasive Microsoft Office document formats with an open-source alternative. But by opening OpenXML and offering it to the ISO as well, Microsoft has pretty much blunted previous criticism. Microsoft will support OpenXML, but not ODF, in its upcoming Office 2007 products. But I think we can expect enterprising developers to offer various translation solutions. After all, both of the formats will be wide open and freely licensable.

Editor's Note: Calling All Windows IT Pro Innovators! Have you developed a solution that uses Windows technology to solve a business problem in an innovative way? Enter your solution in the 2006 Windows IT Pro Innovators Contest! Grand-prize winners will receive airfare and a conference pass to Windows and Exchange Connections in Las Vegas, November 6-9, 2006, plus more great prizes and a feature article about the winning solutions in the December 2006 issue of Windows IT Pro. Contest runs through August 1, 2006. To enter, click here: http://list.windowsitpro.com/t?ctl=29433:610453

==== Events and Resources ====

Increase administration efficiency, build flexible yet inexpensive file-server environments, and maximize potential through consolidation of your SQL Server environment. Make the most of your resources today! http://list.windowsitpro.com/t?ctl=2942E:610453

==== Featured White Paper ====

Learn how to address challenges such as making email truly available 24 x 7 x 365, securing against viruses, comprehensively backing up email data, and more. http://list.windowsitpro.com/t?ctl=2942D:610453

==== Announcement ====

Windows IT Pro Master CD--SAVE 50%! Subscribe today and get portable, high-speed access to the entire Windows IT Pro article database on CD-ROM: a searchable library that includes every Windows IT Pro issue ever published. The newest issue also includes BONUS Windows IT Tips. Order now and save: http://list.windowsitpro.com/t?ctl=29431:610453

==== Contact Us ====

About the newsletter -- letters@windowsitpro.com About technical questions -- http://list.windowsitpro.com/t?ctl=29435:610453 About product news -- products@windowsitpro.com About your subscription -- windowsitproupdate@windowsitpro.com About sponsoring an UPDATE -- emedia_opps@windowsitpro.com

====================

This email newsletter is brought to you by Windows IT Pro, the leading publication for IT professionals deploying Windows and related technologies. Subscribe today! http://list.windowsitpro.com/t?ctl=29434:610453

Manage Your Account You are subscribed as news-and-stuff@arconati.us

You are receiving this email message because you subscribed to this newsletter on our Web site. To unsubscribe, click the unsubscribe link: http://penton.whatcounts.com/u?id=28351AE7DCFB1F6C75B42A4805ED4F2C

View the Windows IT Pro privacy policy at http://list.windowsitpro.com/t?ctl=29432:610453

Windows IT Pro is a division of Penton Media Inc. 221 East 29th Street, Loveland, CO 80538 Attention: Customer Service Department

Is It Your Turn to Take a Bow?

Labels: Books, Microsoft, News, Security, Technology

1. Perspectives - Is It Your Turn to Take a Bow?

2. This & That - Monad Gets a Real Name

3. Script Watch - Protect Your IGDs Against Hacker and Spyware Attacks

4. Scripter's Toolkit - Short Shell Script Supplies Diruse.exe Arguments

5. Featured White Paper - Do You Need 100% Uptime For Your Mission-Critical Email?

6. Announcements - Windows IT Pro Master CD--SAVE 50%! - May Exclusive--Save $100 off the Exchange & Outlook Newsletter

7. Events and Resources - The Essential Guide to Infrastructure Consolidation - Configuring and Managing a Virtual Lab for the Enterprise - Email Compliance Requirements: Getting Started - Expect the Unexpected: Disaster Recovery - Maximize the Potential of Your Windows Environment

/* ==================================== */

:: **** 1. Perspectives **** by Karen Bemowski, kbemowski@windowsitpro.com

Is It Your Turn to Take a Bow? Anne Grubb and I are on a mission. Scripting is taking center stage in the August issue of Windows IT Pro. We need to find a super scripter--an IT Pro Hero in the scripting world--that we can put in the spotlight. You don't need to have superhero powers like Superman or the Bionic Women to be an IT Pro Hero. And you don't need to have a corner office with a bird's eye view. We're looking for a regular Joe or Joanna whose scripting skills saved the day by solving a serious problem, saving a lot of money, or automating a very time-consuming task. If you fit this bill, don't be shy and tell us your story. Tell us about the situation you faced, how your script remedied that situation, and the results of using that script. For good examples of the type of story we're looking for, check out "Crouching Server, Hidden Memory Leak" ( http://penton.whatcounts.com/t?ctl=2939F:610453 ) and "Scripts Save Small Company Some Considerable Cash" ( http://penton.whatcounts.com/t?ctl=2939C:610453 ). You don't need to be a Windows IT Pro subscriber to view these articles. As the examples show, your story doesn't need to be that long--only about 800 to 1000 words. When you send us your story, please include the code file. Although we won't publish the script in the magazine, we'll include a link to it so that readers can download it. That way, if readers find themselves in a similar situation, they can check out your script and possibly adapt it for use in their environment. Please send your stories to me at scriptingcentral@windowsitpro.com or Anne Grubb, Windows IT Pro senior editor, at agrubb@windowsitpro.com. We need to have your story by June 1. If your story is chosen, you'll not only get to be in the spotlight but also get $200 and a copy of the issue in which your story appears. Speaking of being in the spotlight, I'd like to thank Joshua Arzt, David Gray, James Troy, Tad Sherrill, and Bill McEvoy for responding to last month's column and sending me their scripts and code snippets. You're scripting heroes in my book!

:: **** 2. This & That ****

Monad Gets a Real Name Unless you have been working way too hard or have taken a hiatus from scripting the past couple of years, you've probably heard of Monad. Monad has been the code name for a command-line shell and task-based scripting technology. Earlier this week, Microsoft finally announced an official name for this technology: Windows PowerShell. For more information about Windows PowerShell and links to related Web pages, go to http://penton.whatcounts.com/t?ctl=29397:610453 .

:: **** 3. Script Watch ****

Protect Your IGDs Against Hacker and Spyware Attacks Many broadband routers, cable modems, and other Internet Gateway Devices (IGDs) are Universal Plug and Play (UPnP) enabled so that you can remotely manage them. However, UPnP can pose a security risk. Dave Roth tells you about this risk and how you can mitigate it with a Perl script in the article "Query IGD Port Maps." Look for this article in the June issue of Windows Scripting Solutions.

:: **** 4. Scripter's Toolkit ****

' Editor's note: Bill Stewart is the third and final winner of the "Mighty ' Mini" contest. His script supplies default command-line arguments for ' the Diruse.exe utility. Bill also won the drawing for the extra $100.

Short Shell Script Supplies Diruse.exe Arguments Diruse.exe is a handy command-line tool when you want to quickly see how much disk space a directory is using. To use it, you type the Diruse command, its options, and one or more directory names. I found myself frequently typing the command

Diruse /, .

The /, option tells Diruse to use thousands separators when displaying directory sizes. The period (.) tells Diruse to get the current directory's size. Because I was typing this command fairly frequently, I created a command- shell script that initializes the Diruse command with the /, option and the current directory as defaults. The script also expands the period to the full name of the current directory. That way, the full directory name appears in the Diruse output. This script even uses a shorter command name--"du" instead of "diruse"--to boot. Here's my DU.cmd script:

@Echo Off If Not {%1}=={/?} Goto :START Echo Runs Diruse with default command-line options. Echo. Echo DU [options] [path [...]] Echo. Echo Uses the Diruse utility to display the size of one or more Echo directories. Echo. Echo [options] are for the Diruse command; use the command "Diruse /?" Echo for help with its options. Echo. Echo The current directory is assumed if none is specified. Goto :EOF

:START Setlocal Enableextensions Set ARGS=/, Set DIRS= If {%1} NEQ {} Goto :ARGS

:CURRDIR Set DIRS="%CD%" Goto :EXEC

:ARGS Set ARG=%~1 If "%ARG:~0,1%"=="/" (Set ARGS=%ARGS% "%ARG%" & Shift) Else (Goto :DIRS) If {%1}=={} Goto :CURRDIR Goto :ARGS

:DIRS If {%1}=={} Goto :EXEC If Exist "%~1\" (Set DIRS=%DIRS% "%~f1") Else (Echo %~1 not found) Shift Goto :DIRS

:EXEC If Defined DIRS Diruse %ARGS% %DIRS% Endlocal

To change the default options for the Diruse command, modify the Set ARGS= line under the :START label in the script. For example, if you want to use both the /* and /, options, use this line:

Set ARGS=/* /,

The script's logic and flow should be fairly easy to follow. You can download a commented version of DU.cmd by going to http://penton.whatcounts.com/t?ctl=2939D:610453 and clicking the 50174.zip hotlink.) The script uses Diruse.exe from the Windows XP Service Pack 2 Support Tools (http://penton.whatcounts.com/t?ctl=2939B:610453 9761-BA8011FABF38). When you launch DU.cmd, you don't need to specify a directory name or even a period if you want the size of the current directory. Alternatively, you can specify multiple directory names on the command line. If any of the directory names contain spaces, enclose them in quotes. (DU.cmd handles quotes automatically.) I've found this script to be a very useful addition to my scripting toolkit. --Bill Stewart

:: **** 5. Featured White Paper ****

Do You Need 100% Uptime For Your Mission-Critical Email? Learn how to address challenges such as making email truly available 24x7x365, securing against viruses, comprehensively backing up email data, and more. http://penton.whatcounts.com/t?ctl=29396:610453

:: **** 6. Announcements ****

Windows IT Pro Master CD--SAVE 50%! Subscribe today and get portable, high-speed access to the entire Windows IT Pro article database on CD: a searchable library that includes every Windows IT Pro issue ever published. The newest issue also includes BONUS Windows IT Tips. Order now and save: http://penton.whatcounts.com/t?ctl=293A2:610453

May Exclusive--Save $100 off the Exchange & Outlook Newsletter For a limited time, order the Exchange & Outlook Administrator newsletter and SAVE up to $100! You'll get 12 helpful issues loaded with solutions you won't find anywhere else and FREE access to the entire Exchange & Outlook online article database. Subscribe now: http://penton.whatcounts.com/t?ctl=293A1:610453

:: **** 7. Events and Resources ****

The Essential Guide to Infrastructure Consolidation Learn the essentials about how consolidation and selected technology updates build an infrastructure that can handle change effectively. http://penton.whatcounts.com/t?ctl=29399:610453

Configuring and Managing a Virtual Lab for the Enterprise Use virtual server technology to consolidate your production environment using only a fraction of the server hardware in the data center. Live Event: Thursday, May 18 http://penton.whatcounts.com/t?ctl=29398:610453

Email Compliance Requirements: Getting Started Design effective policies to protect your company's assets and data. Don't accidentally damage what you mean to protect! View this on-demand seminar today. http://penton.whatcounts.com/t?ctl=2939A:610453

Expect the Unexpected: Disaster Recovery Learn to differentiate alternative solutions to disaster recovery for your Windows-based applications to determine what works for you and ensure seamless recovery of your key systems--whether a disaster strikes just one server or the whole site. Live event: Thursday, May 11 http://penton.whatcounts.com/t?ctl=293A0:610453

Maximize the Potential of Your Windows Environment Increase administration efficiency, build flexible yet inexpensive file-server environments, and maximize potential through consolidation of your SQL Server environment. Make the most of your resources today! http://penton.whatcounts.com/t?ctl=2939E:610453

==== Contact Us ====

About Scripting Central -- scriptingcentral@windowsitpro.com About product news -- scriptingcentral@windowsitpro.com About your subscription -- scripting_central@list.windowsitpro.com

=================================

This email newsletter is brought to you by Windows IT Pro, the leading publication for IT professionals deploying Windows and related technologies. Subscribe today! http://penton.whatcounts.com/t?ctl=293A3:610453

To ensure that future email messages you receive from Scripting Central aren't mistakenly blocked by antispam software, be sure to add scripting_central@list.windowsitpro.com to your list of allowed senders and contacts.

Manage Your Account You are subscribed as news-and-stuff@arconati.us

View the Windows IT Pro Privacy Policy. http://penton.whatcounts.com/t?ctl=293A4:610453

Windows IT Pro is a division of Penton Media, Inc. 221 East 29th Street, Loveland, CO 80538, Attention: Customer Service Department

2006/05/04

Permission Changes Surprise Mobile Device Administrators

Labels: Business, Microsoft, Military, Mobile, News, Security, Technology

Subscribe to Windows IT Pro: http://list.windowsitpro.com/t?ctl=29306:610453

====================

Don't miss out! Make sure your copy of Exchange and Outlook UPDATE isn't mistakenly blocked by antispam software. Add Exchange_and_Outlook_UPDATE@list.windowsitpro.com to your list of allowed senders and contacts.

====================

This email newsletter comes to you free and is supported by the following advertisers, which offer products and services in which you might be interested. Please take a moment to visit these advertisers' Web sites and show your support for Exchange & Outlook UPDATE.

C2C - Archive One http://list.windowsitpro.com/t?ctl=29300:610453

Hewlett-Packard http://list.windowsitpro.com/t?ctl=292FF:610453

iLumin http://list.windowsitpro.com/t?ctl=29301:610453

====================

1. Commentary - Permission Changes Surprise Mobile Device Administrators - Calling All Windows IT Pro Innovators!

2. Peer to Peer - Featured Forum: Office Tips - Outlook Tip: Understanding Office 2003 SP2's Signature Settings

3. New and Improved - Protect Against Data Loss and Corruption

==== Sponsor: C2C - Archive One ====

Leading industry analyst Butler Group (a Datamonitor company) rate Archive One Policy as one of the top archiving solutions in a recent independent technology audit. In an increasingly crowded arena of e-mail management products, Butler has highlighted the following distinguishing factors of Archive One: 1) Transparency of use to end-users 2) Efficiencies provided by SIS plus 3) The control provided by the automated application policies 4) The use of a repository model 5) C2C's undoubted expertise in the operation of Microsoft Exchange Designed to offer a low TCO and enable organizations to take back control of corporate information, at a corporate level - can you afford not to read the full audit? Click here to obtain your FREE copy: http://list.windowsitpro.com/t?ctl=29300:610453

====================

Editor's note: Share Your Exchange Discoveries and Get $100 Share your Exchange Server and Outlook discoveries, comments, or problems and solutions for use in the Exchange & Outlook Administrator print newsletter's Reader to Reader column. Email your contributions (500 words or less) to r2rxadmin@windowsitpro.com. We edit submissions for style, grammar, and length. If we print your submission, you'll get $100.

====================

==== 1. Commentary: Permission Changes Surprise Mobile Device Administrators ==== by Paul Robichaux, Exchange Editor, exadmin@windowsitpro.com

Security is a tricky thing; there's always pressure to balance improved security against user convenience. You also need to consider factors such as backward-compatibility and the Principle of Least Astonishment (which says that software should always be written so that its behavior is as unsurprising as possible).

The difficulty of trading off security against functionality has recently been highlighted by a change Microsoft made to the way mailbox permissions are applied in Exchange Server 2003 and Exchange 2000 Server. This change has resulted in some puzzled administrators, some broken BlackBerry Enterprise Server (BES) for Exchange deployments, and a lot of complicated technical explanations. Let's see if we can get to the bottom of what's really going on.

The first thing to understand is that the Full Mailbox Access permission has historically granted holders the right to use the Send As and Receive As permissions. If Alice has Full Mailbox Access on Bob's mailbox, you would expect that she could read Bob's mail; you might not expect that she could send mail that appears to come from Bob (and that appears in Bob's Sent Items folder), but that's the way the permission has worked since the release of Exchange 2000.

This permissions assignment came about because the two permissions involved are divided between the Exchange database and Active Directory (AD). Full Mailbox Access is an Exchange permission; Send As is an AD permission. In the original Exchange 2003/2000 behavior, Exchange didn't perform a separate authorization check for the Send As permission if the requestor already had Full Mailbox Access. This is a reasonable optimization, as well as a convenience for administrators who want both permissions granted together. However, it made life more difficult for organizations that separate Exchange permission assignment from AD management.

Combining the permissions in this way led to two undesirable side effects. Most obviously, it allows for spoofing, because an intruder could use a service account to send mail from any of the mailboxes for which it has Full Mailbox Access privileges. Also, there's no way for a recipient to tell the difference between a message sent by the mailbox owner and one sent by a delegate who has Full Mailbox Access.

To remedy these problems, Microsoft released a hotfix for store.exe, which was first included in store.exe version 7650.23 for Exchange 2003 Service Pack 2 (SP2), plus earlier versions for Exchange 2003 SP1 and Exchange 2000 SP3. The hotfix changes Exchange's behavior so that it explicitly checks for the "Send As" permission before allowing delegate access. This seems simple enough, and for many Exchange sites, it is.

However, organizations that were using BES or Good Technology's GoodLink packages quickly found that the fix affected their installations--BES, GoodLink, and some other third-party (and custom) applications depend on having both permissions granted. Users who had Full Mailbox Access permissions granted to the BES or GoodLink service account, without also having Send As permissions granted, quickly found that they could no longer send mail.

In Microsoft's defense, the company published the article "Users cannot send e-mail messages from a mobile device or from a shared mailbox in Exchange 2000 Server and in Exchange Server 2003" (http://list.windowsitpro.com/t?ctl=29309:610453 ) when the hotfix was released. The article clearly explained the problem and what to do about it. However, apparently not everyone got the word; I was surprised to see a new post on the Exchange team blog last week describing the fix in more detail. The Microsoft article was also updated with a more in-depth explanation of what changed; best of all, it now contains a script that you can run to identify users who have Full Mailbox Access but not Send As permissions. The script outputs a tab-delimited file listing accounts, which you can edit and then feed back to the script to apply Send As permissions to the accounts that you actually want to have it.

Do you need to do anything? It depends. If you're using BES or GoodLink software, you'll definitely know when you need to make this change; as soon as you apply a store.exe hotfix more recent than 7650.23 (or the equivalent for your version of Exchange), this behavior will kick in. You should run the script before then to avoid any interruptions in service. If you're not using either of these programs, you should probably still use the script to see whether you have any lurking permissions that you don't know about. It's not uncommon for an administrator who inherits an Exchange organization to be unpleasantly surprised by the permissions granted by his predecessor.

-----

Calling All Windows IT Pro Innovators! Have you developed a solution that uses Windows technology to solve a business problem in an innovative way? Enter your solution in the 2006 Windows IT Pro Innovators Contest! Grand-prize winners will receive airfare and a conference pass to Windows and Exchange Connections in Las Vegas, November 6-9, 2006, plus more great prizes and a feature article about the winning solutions in the December 2006 issue of Windows IT Pro. Contest runs through August 1, 2006. To enter, click here: http://list.windowsitpro.com/t?ctl=29308:610453

====================

==== Sponsor: Hewlett-Packard ====

Expert Ben Smith describes the benefits of using server virtualization to make computers more efficient. Download the exclusive podcast today! http://list.windowsitpro.com/t?ctl=292FF:610453

====================

==== Events and Resources ==== ( A complete Web and live events directory brought to you by Windows IT Pro: http://list.windowsitpro.com/t?ctl=2930A:610453 )

Learn the essentials about how consolidation and selected technology updates build an infrastructure that can handle change effectively. http://list.windowsitpro.com/t?ctl=292FC:610453

Use virtual server technology to consolidate your production environment using only a fraction of the server hardware in the data center. Live Event: Thursday, May 18 http://list.windowsitpro.com/t?ctl=292FB:610453

Design effective policies to protect your company's assets and data. Don't accidentally damage what you mean to protect! View this on-demand seminar today. http://list.windowsitpro.com/t?ctl=292FE:610453

Learn to differentiate alternative solutions to disaster recovery for your Windows-based applications and ensure seamless recovery of your key systems--whether a disaster strikes just one server or the whole site. Live event: Thursday, May 11 http://list.windowsitpro.com/t?ctl=29307:610453

==== Featured White Papers ====

Learn how to address challenges such as making email truly available 24x7x365, securing against viruses, comprehensively backing up email data, and more. http://list.windowsitpro.com/t?ctl=292F9:610453

~~~~ Hot Spot ~~~~ Gain control of your messaging data with step-by-step instructions for complying with the law, ensuring your systems are working properly and ultimately making your job easier. http://list.windowsitpro.com/t?ctl=29301:610453

==== 2. Peer to Peer ====

Instant Poll: What are your vacation plans for this summer? Go to the Windows IT Pro home page and select a) Taking 1 week, b) Taking 2 weeks, c) Taking 3 weeks, d) Not taking any time off, or e) Taking my work to the beach. http://list.windowsitpro.com/t?ctl=2930C:610453

Featured Forum: Office Tips As an IT professional, do you feel you spend too much of your time answering user questions about Microsoft Office applications? If you would like to improve your users' productivity with Microsoft Word, Excel, Outlook, PowerPoint, and Access, the new Office Tips forum is for you. You can ask Microsoft Office-related questions and swap tips with your fellow IT pros. Check it out at the following URL: http://list.windowsitpro.com/t?ctl=292FD:610453 Outlook Tip: Understanding Office 2003 SP2's Signature Settings by Sue Mosher, exadmin@turtleflock.com

Q: The behavior of the Group Policy setting "Disable signature for replies and forwards" has changed in Microsoft Office 2003 Service Pack 2 (SP2)--it now disables all controls related to signatures. Is there a way to keep the options for creating new signatures and setting the default signature for new messages? Find the answer (and links to more great tips) at http://list.windowsitpro.com/t?ctl=292FA:610453

==== Announcements ==== (from Windows IT Pro and its partners)

==== 3. New and Improved ==== by Blake Eno, products@windowsitpro.com

Protect Against Data Loss and Corruption MessageOne announced Email Management Services (EMS) Email Recovery, a solution that protects against data loss and corruption. EMS Email Recovery features message-by-message synchronization and recovery to protect against data-level corruption. The product lets you quickly restore any message or group of messages without having to rebuild an entire server. EMS Email Recovery also protects your email with strong- key encryption, secure transport, and full integration with Windows Authentication. For more information, contact MessageOne at 512-652- 4500 or 888-367-0777. http://list.windowsitpro.com/t?ctl=2930D:610453

Tell Us About a Hot Product and Get a T-Shirt! Have you used a product that changed your IT experience by saving you time or easing your daily burden? Tell us about the product, and we'll send you a T-shirt if we write about the product in a future Windows IT Pro What's Hot column. Send your product suggestions with information about how the product has helped you to whatshot@windowsitpro.com.

===================

~~~~ Contact Us ~~~~

About the newsletter -- letters@windowsitpro.com About technical questions -- http://list.windowsitpro.com/t?ctl=2930B:610453 About product news -- products@windowsitpro.com About your subscription -- exchangeandoutlookupdate@windowsitpro.com About sponsoring UPDATE -- salesopps@windowsitpro.com

====================

This email newsletter is brought to you by Exchange & Outlook Administrator, the leading publication for IT professionals managing, securing, optimizing, and migrating Exchange and Outlook. Subscribe today! http://list.windowsitpro.com/t?ctl=29304:610453

Manage Your Account You are subscribed as news-and-stuff@arconati.us

You are receiving this email message because you subscribed to this newsletter on our Web site. To unsubscribe, click the unsubscribe link: http://list.windowsitpro.com/u?id=28351AE7DCFB1F6C807AF0A29138E407

View the Windows IT Pro Privacy policy at http://www.windowsitpro.com/AboutUs/Index.cfm?action=privacy Windows IT Pro a division of Penton Media Inc. 221 East 29th Street, Loveland, CO 80538, Attention: Customer Service Department Copyright 2006, Penton Media, Inc. All Rights Reserved.

Report: Microsoft Considered Yahoo! Acquisition to Defeat Google

Labels: Business, Google, Microsoft, News, Security, Technology, Yahoo

Report: Microsoft Considered Yahoo! Acquisition to Defeat Google

Subscribe to Windows IT Pro: http://list.windowsitpro.com/t?ctl=291C0:610453

====================

Microsoft http://list.windowsitpro.com/t?ctl=291C1:610453

==== Sponsor: Microsoft ====

==== In the News ==== Report: Microsoft Considered Yahoo! Acquisition to Defeat Google

by Paul Thurrott, thurrott@windowsitpro.com

A report published in "The Wall Street Journal" yesterday noted that Microsoft talked with Yahoo! sometime in the last year. The subject? A possible acquisition of Yahoo! by Microsoft. According to the report, the goal was to quickly improve Microsoft's position in the online services market against Google, the software giant's most bitter rival.

Although an acquisition that large would surely come under antitrust scrutiny, the seemingly abandoned scheme is notable for other reasons. Many people assumed Microsoft would continue backing its money-losing online services until they turned a profit; after all, some Microsoft products had languished in the market for years before taking off. Buying Yahoo! would have accelerated the company's efforts by combining Microsoft and Yahoo!'s best services.

Although the Microsoft/Yahoo! talks did go on for more than a year, they are apparently no longer taking place. "The Wall Street Journal" implies that when the Yahoo! talks stopped, Microsoft reorganized to take advantage of its own online services in the third quarter 2005.

Microsoft faces other pressures in addition to the obvious competition from Google. Shareholders are outraged that the company's stock price has remained stagnant for several years, and Microsoft's most recent quarterly earnings warned that an additional $2 billion would be spent in the next fiscal year. Meanwhile, Google's stock price continues to hover at about $400 per share, almost 20 times the price of Microsoft's stock.

News of Microsoft's attempts to purchase Yahoo! came just months after reports that the company tried to combine MSN with Time Warner's AOL. Not coincidentally, that deal fell apart when Google paid $1 billion to purchase a 5 percent stake in AOL.

==== Events and Resources ====

Learn to differentiate alternative solutions to disaster recovery for your Windows-based applications to determine what works for you and ensure seamless recovery of your key systems--whether a disaster strikes just one server or the whole site. Live event: Thursday, May 11 http://list.windowsitpro.com/t?ctl=291C2:610453

==== Featured White Paper ====

==== Announcement ====

==== Contact Us ====

About the newsletter -- letters@windowsitpro.com About technical questions -- http://list.windowsitpro.com/t?ctl=291C7:610453 About product news -- products@windowsitpro.com About your subscription -- windowsitproupdate@windowsitpro.com About sponsoring an UPDATE -- emedia_opps@windowsitpro.com

====================

Manage Your Account You are subscribed as news-and-stuff@arconati.us

View the Windows IT Pro privacy policy at http://list.windowsitpro.com/t?ctl=291C4:610453

Windows IT Pro is a division of Penton Media Inc. 221 East 29th Street, Loveland, CO 80538 Attention: Customer Service Department

Get Ready for Exchange & Office 2007 Roadshow

Labels: Microsoft, News, Security

Get Ready for Exchange & Office 2007 Roadshow in Lisbon, Portugal - 30 May 2006

Are you considering an upgrade or migration to Exchange 2007 or Office 2007? Are you wondering how a migration will impact your organization and infrastructure? This information-packed one-day event will put you directly in touch with [drb1]Exchange and Office experts who have the answers to these and many other questions.

This is a FREE event, so secure your spot today by registering at: http://list.windowsitpro.com/t?ctl=291A2:610453

You will be able to choose from three tracks, based on your needs and interests: 1) Securing, Managing, and Deploying Exchange Server 2007, 2) Delivering Anywhere Access, and 3) Securing, Managing, and Deploying Office System 2007. You'll come away from the Get Ready for Exchange & Office 2007 Roadshow with a clear understanding of how to implement a best-practices migration to Exchange Server 2007, how to use Exchange Server 2007's new capabilities to improve your messaging environment, and how you and your end users can get the most out of Office 2007.

What you will learn: * The new features and functionality of Exchange Server 2007 and how best to deploy * How best to manage Exchange Server 2007 * The new security features and functionality of Exchange Server 2007 * The new capabilities of each Exchange Server 2007 client * Exchange Server 2007 client security, unified messaging, and mobility features * How best to deploy Office 2007, and how best to take advantage of new security and collaboration features

*************** You are subscribed as news-and-stuff@arconati.us.

You received this email because you are subscribed to a Windows IT Pro product and/or service. To unsubscribe, click here: http://list.windowsitpro.com/u?id=28351AE7DCFB1F6C7EBF26536AEC6BDA

To manage your subscriptions, please visit our email subscription center at: http://list.windowsitpro.com/t?ctl=291A3:610453

View the Windows IT Pro Privacy policy at: http://www.windowsitpro.com/AboutUs/Index.cfm?action=privacy Windows IT Pro is a division of Penton Media, Inc. 221 East 29th Street, Loveland, CO 80538 USA Phone: 1-800-793-5697 or 1-970-663-4700

Online Backup and Recovery Strategies

Labels: Microsoft, Security, Storage, Technology

-- STORAGE --

Learn the top ten reasons why SMBs are embracing online backup and recovery to protect server data including automatic, continuous data protection (CDP), secure offsite storage, and data encryption for reliable server backup and disaster recovery. http://list.windowsitpro.com/t?ctl=29195:610453

Explore how the standardization of storage hardware will change market dynamics, focusing on the growth of iSCSI SANs and "glue software." http://list.windowsitpro.com/t?ctl=29199:610453

Explore VM backup solutions for disaster recovery, configuration changes, and more. http://list.windowsitpro.com/t?ctl=29197:610453

Learn the essentials about how consolidation and selected technology updates build an infrastructure that can handle change effectively. http://list.windowsitpro.com/t?ctl=29198:610453

-- SECURITY --

Learn to identify the top 5 IM security risks, and protect your networks and users. http://list.windowsitpro.com/t?ctl=29196:610453

Test the Starter PKI Program to benefit your company with timesaving convenience and secure multiple domains and host names. http://list.windowsitpro.com/t?ctl=2919A:610453

Examine the threats of allowing unwanted or offensive content into your network and learn about the technologies and methodologies to defend against inappropriate content, spyware, IM, and P2P. http://list.windowsitpro.com/t?ctl=2919F:610453

-- More Windows IT Pro Resources --

Whitepapers: http://list.windowsitpro.com/t?ctl=2919B:610453 Essential Guides: http://list.windowsitpro.com/t?ctl=2919C:610453 Ebooks: http://list.windowsitpro.com/t?ctl=2919D:610453

----------------------------- Did you find these resources helpful? Why not forward this email to a friend? -----------------------------

You received this email because you requested to receive additional information about eBooks and white papers from Windows IT Pro. To unsubscribe, click: http://list.windowsitpro.com/u?id=28351AE7DCFB1F6C939D6D542427CE0A

To manage your subscriptions, please visit our email subscription center at: http://list.windowsitpro.com/t?ctl=2919E:610453

Microsoft in Government: Security Guidance Center

Labels: Business, Developer, Government, Local, Microsoft, News, Security, Technology

Microsoft in Government eNewsletter Issue 5 : May 4, 2006

Welcome to Microsoft in Government, a monthly newsletter delivering information on issues, training, products and events exclusive to the federal and state & local government community.

The information found at the Security Guidance Center <http://go.microsoft.com/?linkid=4875328> can help you safeguard your government organization against malicious security attacks to your network and computers.

----------------------------------------------------------------------

News & Highlights

Microsoft, SAP bring together worlds of productivity and enterprise applications <http://go.microsoft.com/?linkid=4875283> Duet <http://go.microsoft.com/?linkid=4875329>, a new software application jointly developed by Microsoft and SAP, allows information workers to use their familiar Microsoft Office environment to access selected SAP business processes and data.

Governments turn to asset management systems to cut costs, reap savings <http://go.microsoft.com/?linkid=4875284> Seeking more efficient government services, some states and municipalities are turning to asset management, an IT concept that offers an enterprise view of an organization's holdings. - Washington Technology

Strategy guide from CDG takes new view of Homeland Security <http://go.microsoft.com/?linkid=4875285> A new strategy paper, produced by the Center for Digital Government <http://go.microsoft.com/?linkid=4875330> and underwritten by Microsoft, examines the immense task of securing the homeland from the bottom up.

Microsoft CTO Ray Ozzie | Behind Microsoft's Groove-iness <http://go.microsoft.com/?linkid=4875286> Q&A: Ozzie discusses how Groove <http://go.microsoft.com/?linkid=4875331> products (now part of the Microsoft Office group) complement and extend Microsoft's collaboration capabilities. - Government Computing News

Microsoft-based solution provides real-time communication for Florida event <http://go.microsoft.com/?linkid=4875287> E-Sponder <http://go.microsoft.com/?linkid=4875332> is a collaboration and communication Web portal that provides real-time shared information during events involving several jurisdictions or agencies. - Government Technology

----------------------------------------------------------------------

Technology Update

Preview: Security in Windows Vista <http://go.microsoft.com/?linkid=4875288> Read this exclusive preview of the May edition of TechNet Magazine, with an in-depth look at the new and improved security features in Windows Vista.

Maximize your technology experience with the Microsoft Government Community <http://go.microsoft.com/?linkid=4875289> Visit the Microsoft Government Community <http://go.microsoft.com/?linkid=4875333> to share ideas, get answers to your questions, read expert advice, and get tips and about Microsoft products and services.

Unlock the power of your technology with free training from Microsoft <http://go.microsoft.com/?linkid=4875290> Maximize the investment your government organization has made in Microsoft products and services. Get free training! <http://go.microsoft.com/?linkid=4875334>

Did you purchase Microsoft Office Project Server and CALs between November 14 and March 31? <http://go.microsoft.com/?linkid=4875291> Find out if you're eligible to receive up to $40,000 in partner services.

----------------------------------------------------------------------

Events and Webcasts

Security Matters - Microsoft 2006 Security Summits <http://go.microsoft.com/?linkid=4875292> Learn about key trends in the Security Industry, how to best prepare for advances in security technologies, and find out what Microsoft is doing to help our customers address risks.

· May 8 | New York, NY <http://go.microsoft.com/?linkid=4875294>

· May 23 | Rosemont, IL (Chicago) <http://go.microsoft.com/?linkid=4875295>

· June 26 | Novi, MI (Detroit) <http://go.microsoft.com/?linkid=4875296>

Microsoft Collaboration Briefings <http://go.microsoft.com/?linkid=4875297> These government-focused briefings will showcase improving group productivity and effectiveness using the Microsoft Office System <http://go.microsoft.com/?linkid=4875335>.

· May 23 | Washington, DC <http://go.microsoft.com/?linkid=4875299>

· May 25 | Denver, CO <http://go.microsoft.com/?linkid=4875300>

Eskel Porter Presents: Service Delivery Solutions for State Government <http://go.microsoft.com/?linkid=4875301> May 25 | Sacramento, CA See how this Microsoft CRM solution is solving agencies' CRM problems and improving service delivery.

Windows Vista: Improve your desktop security and deployment strategy <http://go.microsoft.com/?linkid=4875303> See how security and reliability advancements with Windows Vista, Microsoft's new desktop operating system, can give you and your users confidence in your PCs.

Don't miss Microsoft-hosted events in your area! <http://go.microsoft.com/?linkid=4875305> Hundreds of Microsoft events occur monthly throughout the United States. Search <http://go.microsoft.com/?linkid=4875336> for an upcoming event that's local to you!

Real-World Solutions Microsoft and its industry partners are providing solutions today that are making a difference in government. To learn about solutions for federal, state and local government, click HERE <http://go.microsoft.com/?linkid=4875337>.

Read the case studies Learn how Microsoft technology is helping customers in the public sector increase productivity, while improving collaboration and communication.

· New data warehouse to buoy 7 terabytes for State of Alaska <http://go.microsoft.com/?linkid=4875306>

· Alaska borough reduces costs, improves services with switch from Novell to Windows <http://go.microsoft.com/?linkid=4875307>

· State office increases financial visibility with a budgetary data workspace solution <http://go.microsoft.com/?linkid=4875308>

See more case studies here <http://go.microsoft.com/?linkid=4875338>.

----------------------------------------------------------------------

For the Developer

Developer Security Training <http://go.microsoft.com/?linkid=4875309> Learn more about best practice in writing secure code and review training material to extend your knowledge in the field of application security.

The Microsoft Federal Architect Forum <http://go.microsoft.com/?linkid=4875310> May 10-11 | Arlington, VA Join us at Microsoft's annual gathering of architects and technology officers from various government agencies.

Building secure ASP.NET apps: Authentication, authorization, and secure communication <http://go.microsoft.com/?linkid=4875311> This guide presents a practical, scenario-driven approach to designing and building secure ASP.NET applications.

Step up to the ultimate development environment <http://go.microsoft.com/?linkid=4875312> Get Microsoft Visual Studio 2005 Team Suite <http://go.microsoft.com/?linkid=4875339> with MSDN Premium Subscription at special pricing (ends June 30.)

Federal developer weblog: Virtual Earth Map Control and AJAX <http://go.microsoft.com/?linkid=4875313> Check out this screencast <http://go.microsoft.com/?linkid=4875340> showing you the fundamentals of a "mashup" approach using the Virtual Earth map control and some plain old AJAX programming.

Try out a Microsoft Virtual Lab Express <http://go.microsoft.com/?linkid=4875314> These are 20-minute hands-on overviews of some of your favorite Microsoft products and developer tools. Try one! <http://go.microsoft.com/?linkid=4875341>

----------------------------------------------------------------------

Security Updates

· Critical security updates <http://go.microsoft.com/?linkid=4875315>

· Windows updates <http://go.microsoft.com/?linkid=4875316>

----------------------------------------------------------------------

Find Upcoming Events Find online or in-person events to suit your needs! <http://go.microsoft.com/?linkid=4875342>

· Upcoming webcasts <http://go.microsoft.com/?linkid=4875317>

· Executive Circle webcasts <http://go.microsoft.com/?linkid=4875318>

· TechNet events <http://go.microsoft.com/?linkid=4875319>

· Developer events <http://go.microsoft.com/?linkid=4875320>

----------------------------------------------------------------------

Getting this news secondhand? Sign up!

http://go.microsoft.com/?linkid=4875273

----------------------------------------------------------------------

Resources for

· Business Decision-Makers <http://go.microsoft.com/?linkid=4875322>

· IT Professionals <http://go.microsoft.com/?linkid=4875323>

· Developers <http://go.microsoft.com/?linkid=4875324>

· Government Partners <http://go.microsoft.com/?linkid=4875325>

----------------------------------------------------------------------

Find a Case Study

· Government Case Studies <http://go.microsoft.com/?linkid=4875326>

----------------------------------------------------------------------

Blogs

· Federal Developer Blog <http://go.microsoft.com/?linkid=4875327>

----------------------------------------------------------------------

Comments? Suggestions?

· E-mail us <mailto:msingov@microsoft.com>

====================================================================== If you would prefer to receive the HTML version of this newsletter, reply to this e-mail message, type HTML in the subject line, and click Send.

To cancel your subscription to this newsletter, reply to this message with the word UNSUBSCRIBE in the Subject line. You can also unsubscribe at the Microsoft.com web site <http://www.microsoft.com/misc/unsubscribe.htm>. You can manage all your Microsoft.com communication preferences at this site.

Legal Information <http://www.microsoft.com/info/legalinfo/default.mspx>.

This newsletter was sent by the Microsoft Corporation 1 Microsoft Way Redmond, Washington, USA 98052

© 2006 Microsoft Corporation. All rights reserved. Microsoft, MSDN, the Office logo, and Visual Studio are either registered trademarks or trademarks of the Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

TechNet Flash: New Sections, More Tips for IT Pros

Labels: Books, Developer, Microsoft, Mobile, News, Security, Storage, Technology

Microsoft TechNet Flash Volume 8, Issue 9 : May 3, 2006

Let us know what interests you <http://go.microsoft.com/?linkid=4874217>, and we'll customize your TechNet Flash newsletter with additional reports on topics such as desktop operating systems, server technologies, or security. And please let us know what you think <http://go.microsoft.com/?linkid=4874218> of TechNet Flash.

From the Editor

Hello New TechNet Flash Subscriber,

As you may have noticed last issue, we're now featuring on-demand webcasts and other rich-media content such as TechNet Radio, Interface TV (both of which appeared in the last issue <http://go.microsoft.com/?linkid=4874219>), and the .NET Show in a special "On Demand" section. In this issue, the section features top-rated webcasts, which we think you'll find are well worth watching.

This issue also features an expanded Scripting section (including a just-published feature on Scripting with Windows PowerShell), plus a whole new series of Tips for IT Pros, and a link to all the editorial content from the May/June edition of TechNet Magazine.

---------------------------------------------------------------------- As well, this issue includes a special report from the Microsoft Management Summit 2006, available to those who've selected "System Management Software" in their personalization preferences. And, of course, there's a growing collection of Beta Updates for those who personalize their newsletter in that section, too. It's safe to say that you're missing out if you haven't yet begun customizing your newsletter.

Enjoy the issue. Graeme Bennett Editor, TechNet Flash

----------------------------------------------------------------------

2006/05/03

CertTutor QOW 05-03-06

Labels: Blogger, Business, Local, Microsoft, News, Security, Storage, Technology, Wishlist

Welcome to the Weekly CertTutor.net Question of the Day Digest.

___________________________________________________________

Primary Ad - Hewlett-Packard

Learn the essentials about how consolidation and selected technology updates build an infrastructure that can handle change effectively.

http://list.windowsitpro.com/t?ctl=2908E:610453

___________________________________________________________

CertTutor.net is a certification related website that has published certification authors such as Ian McLean, Will Willis, Gregory W. Smith and Orin Thomas regularly answering your questions.

In this newsletter you'll find the questions listed in exam number order. Windows 2003 towards the top of the newsletter and Windows 2000 questions towards the bottom.

If the answer URLS wrap and don't work, try cutting and pasting them into notepad.

If you disagree with any of the answers, post your feedback on the forums. If you don't understand some of the concepts - please ask us to explain. Some of the best in the field will answer your question!

Thanks for being a subscriber and good luck on your exams!

___________________________________________________________

Secondary Ad - Symantec

Learn to secure your IM traffic - don't let your critical business information be intercepted!

http://list.windowsitpro.com/t?ctl=29094:610453

___________________________________________________________

----------------------- 70-270 QUESTION 1 -----------------------

You want to run a script from your Windows XP Professional workstation every 30 minutes that queries your Windows 2003 file server and then provides a list that it appends to the text file in the d:\logs\serveraccess.txt directory on your Windows XP workstation.

You're logged on to your Windows 2003 domain, and your account has full domain administrator access. You want to query a file server called oksana.odlt.com and add a time stamp in front of each entry in serveraccess.txt. To do so, you need to complete two tasks: Write a batch file called getinfo.bat and put it in the c:\scripts directory, then correctly schedule getinfo.bat to execute every 30 minutes.

Which of the following would you need to do to complete this task? (Select two; some lines wrap.)

A. Execute the following command at the command prompt:

schtasks /create /tn getinfo.bat /tr c:\scripts\srvacs.bat /sc minute /mo 30

B. Create batch file

c:\scripts\getinfo.bat

Have the following two lines in the batch file

time /t >> d:\logs\serveraccess.txt

openfiles /query /s oksana.odlt.com >> d:\logs\serveraccess.txt

C. Create batch file

c:\scripts\getinfo.bat

Have the following two lines in the batch file

time /t > d:\logs\serveraccess.txt openfiles /query /s oksana.odlt.com > d:\logs\serveraccess.txt

D. Execute the following command at the command prompt:

addjobs /create /tn srvacs /tr c:\scripts\getinfo.bat /sc minute /mo 30

E. Create batch file

c:\scripts\info.bat

Have the following two lines in the batch file

time /t >> d:\logs\serveraccess.txt

openfiles /query /s oksana.odlt.com >> d:\logs\serveraccess.txt

F. Execute the following command at the command prompt:

schtasks /create /tn srvacs /tr c:\scripts\getinfo.bat /sc minute /mo 30

----------------------- 70-270 QUESTION 2 -----------------------

Your organization has recently purchased five high-end workstations that run Windows XP 64-bit edition, one of which has a problem in its startup cycle. Something appears to be wrong with the registry information and hardware abstraction layer (HAL) loads.

Which of the following correctly contains the names of the files that load the kernel, the HAL, and the registry information on each platform? (Select the best answer.)

A. Windows XP 64-bit: ntdetect.com Windows XP Pro: ntdetect.com B. Windows XP 64-bit: ia64ldr.efi Windows XP Pro: ia64ldr.efi C. Windows XP 64-bit: ia64ldr.efi Windows XP Pro: ntdetect.com D. Windows XP 64-bit: ntoskrnl.exe Windows XP Pro: ntdetect.com E. Windows XP 64-bit: ia64ldr.efi Windows XP Pro: ntoskrnl.exe

----------------------- 70-270 QUESTION 3 ----------------------- You have been asked to help a senior manager disable a particularly annoying application that activates every time he logs in. Unfortunately, the application is corrupt and locks up the system, so the manager can't delete the application by removing it from the startup folder. When you arrive at his office, the system has already booted to the point where the logon banner displays. You want to deal with this problem as expeditiously as possible, which means you don't have the option of rebooting back into safe mode.

Which of the following should you do? (Select the best answer.)

A. Log in using CTRL+ALT+DEL. When the system accepts the login, hold down the SHIFT key to disable all startup programs from running.

B. Log in using CTRL+ALT+DEL. When the system accepts the login, hold down the BREAK key to disable all startup programs from running.

C. Log in using CTRL+ALT+DEL. When the system accepts the login, hold down the SPACEBAR to disable all startup programs from running.

D. Log on using CTRL+ALT+DEL. When the system accepts the logon, hold down the Alt key to disable all startup programs from running.

To find the answers to the above three questions go to:

http://list.windowsitpro.com/t?ctl=29093:610453

___________________________________________________________

Hot Topic Ad - LeftHand Networks

Explore how the standardization of storage hardware will change market dynamics, focusing on the growth of iSCSI SANs and "glue software."

http://list.windowsitpro.com/t?ctl=2908F:610453

___________________________________________________________

---------------------- 70-290 QUESTION 1 -----------------------

Beradio is monitoring an old Windows Server 2003 system that was upgraded from a Windows 2000 System 18 months ago. The Server has been performing poorly and Beradio is trying to determine if a particular hardware component is causing a bottleneck. Beradio gathers the following data from the Systems Monitor Utility:

% Processor Time (Average): 67%

Processor Queue Length (Average): 1

Pages /sec (Average): 4

Average Disk sec/Transfer: 0.8

Disk Queue Length (Average): 9

Given this information, which of the following components is the most likely bottleneck?

A. Network Adapter is the bottleneck.

B. The Physical Disk is the bottleneck.

C. The Processor is the bottleneck.

D. The RAM is the bottleneck.

----------------------- 70-290 QUESTION 2 -----------------------

Parsons, Bouillon and Beradio all have user accounts within a Windows Server 2003 Domain. They all use a shared folder on the 2003 Member Server DEMOSTHENES named LOCKE. Parsons is a member of three groups that have been assigned permissions to this share. Bouillon is a member of two groups that have been assigned permissions to this share. Beradio is a member of two groups that have been assigned permissions to this share. There are four groups in total that have been assigned permissions to this share - they are ENGINEERING, MARKETING, MANAGERS and ACCOUNTANTS. Bouillon and Beradio are not members of the same groups. Parsons is a member of Beradio's groups. Bouillon and Parsons are members of the Managers group. Beradio is not a member of the Accountants group. The share permissions for LOCKE are as follows.

Parsons - Full Control (ALLOW) Bouillon - Full Control (ALLOW) Beradio - Full Control (ALLOW) Managers - Full Control (DENY) Accountants - Full Control (DENY) Engineering - Read (ALLOW) Marketing - Read (ALLOW)

NTFS permissions for the folder hosting the LOCKE share and its subfolders are:

Parsons - Full Control (ALLOW) Bouillon - Full Control (ALLOW) Beradio - Full Control (ALLOW) Managers - Full Control (ALLOW) Accountants - Full Control (DENY) Engineering - Read (ALLOW) Marketing - Read (DENY)

What will Bouillon's effective permissions be to files on the LOCKE share if he is attempting to access it from a workstation on the network?

A. Full Control

B. No Access

C. Read

D. Change (Read, Write, Execute and Delete)

----------------------- 70-290 QUESTION 3 -----------------------

There are six files that have compression status as outlined in the table below hosted on a Windows Server 2003 DC named BLOGGER.

ALPHA.TXT = COMPRESSED BETA.TXT = UNCOMPRESSED GAMMA.TXT = UNCOMPRESSED DELTA.TXT = UNCOMPRESSED EPSILON.TXT = COMPRESSED OMEGA.TXT = COMPRESSED.

All of the files are located in a folder on the ROME volume called COMPTEST. Elsewhere on the ROME volume there are the following folders with the following compression stats:

ATLAS = COMPRESSED AWESOME = UNCOMPRESSED

On the MILAN volume, formatted with NTFS, there are the following folders.

WARHAMMER = UNCOMPRESSED RIFLEMAN = COMPRESSED

The following actions are performed:

ALPHA.TXT is moved to WARHAMMER. BETA.TXT is copied to RIFLEMAN. GAMMA.TXT is moved to ATLAS. DELTA.TXT is copied to AWESOME. EPSILON.TXT is copied to WARHAMMER. OMEGA.TXT is moved to AWESOME.

Which files will now be compressed after performing the actions listed above? Choose all that apply.

A. BETA.TXT

B. DELTA.TXT

C. EPSILON.TXT

D. ALPHA.TXT

E. OMEGA.TXT

F. GAMMA.TXT

To find the answers to the above three questions go to:

http://list.windowsitpro.com/t?ctl=29091:610453

----------------------- 70-291 QUESTION 1 -----------------------

Your network contains two routed subnets: Subnet A and Subnet B. Subnet B contains a Windows Server 2003 system configured as a DHCP server. This server has scopes created for both Subnet A and Subnet B. Subnet A does not contain a DHCP server.

The clients on Subnet A are not receiving IP addresses from the DHCP server. What can you do to enable clients in Subnet A to receive dynamically assigned IP addresses? Choose all that apply.

A. Configure an RFC 1560-compliant router to pass all UDP traffic on ports 2151, 2152, 2153 and 2154.

B. Configure an RFC 1542-compliant router to forward BOOTP messaging between subnets.

C. Install and configure a DHCP server on Subnet A.

D. Configure the clients on Subnet A to use H-node NetBIOS name resolution.

E. Create a superscope on the DHCP server in Subnet B which contains both the scope for Subnet A and the scope for Subnet B.

F. Configure a DHCP relay agent on Subnet A to forward DHCP messages to Subnet B.

----------------------- 70-291 QUESTION 2 -----------------------

Rooska is setting up dial-up connections for a group of users on the network that he administers. He would like to configure the dial-up connection to require data encryption for all connections. Which of the following protocols support data encryption? Choose all that apply.

A. MS-CHAP v2

B. MS-CHAP

C. PAP

D. SPAP

E. EAP/TLS

F. CHAP

----------------------- 70-291 QUESTION 3 -----------------------

Oksana has configured a Windows XP Professional machine in a small branch office to have a dial-up 56K connection to the Internet. She would like to make that connection available to the other users in the branch office through the Internet Connection Sharing (ICS) feature in Windows XP. How can she enable ICS on a network connection?

A. Reconifigure the TCP/IP properties for the internal network interface. Set the IP address to an address in the 192.168.x.y range. Configure a DHCP scope on the machine and assign it IP addresses from the same range. Exclude the statically-assigned IP address from the previous step.

B. Open Network and Dial-up Connections, right-click the connection that you want to share, choose properties and select the "Enable Internet connection sharing for this connection" check box from the sharing tab.

C. Open Routing and Remote Access, click ICS, right- click ICS and add a New Interface.

D. In Control Panel, double-click ICS. Configure ICS through the Internet Connection Sharing Setup wizard.

To find the answers to the above three questions go to:

http://list.windowsitpro.com/t?ctl=29090:610453

----------------------- 70-294 QUESTION 1 -----------------------

You installed Active Directory on a machine running Windows 2003 Server several months ago. When you did this you put the SYSVOL and the Active Directory log files on a separate hard disk (Disk1) from the one that you installed the operating system files and the Active Directory database to (Disk0). Now you would like to remove Disk1 from the Server and use it in a different machine. You would like to move the Active Directory log files and SYSVOL to Disk0. Can this be accomplished and if so how can you do it?

A. No, this cannot be accomplished. You must remove and reinstall Active Directory if you wish to change the location of SYSVOL.

B. Yes, this can be accomplished. You must enter Directory Services Restore Mode and use the ntdsutil utility to move the Active Directory log files and SYSVOL.

C. Yes, this can be accomplished. You must boot into Safe Mode and use the ntdsutil utility to move the Active Directory log files and SYSVOL.

D. Yes, this can be accomplished. Both SYSVOL and the Active Directory log files can be moved using Windows Explorer.

----------------------- 70-294 QUESTION 2 -----------------------

To provide consistency on your network and decrease the amount of configuration necessary, you have decided to control many settings through the use of security templates. While researching the use of security templates, you discover that not all settings can be configured through security templates. You decide to make a list of the settings that can be configured through templates. Which of the following should you include on your list?

Choose all that apply.

A. Local Policies

B. Public Key Policies

C. Account Policies

D. File System

E. Restricted Groups

F. Registry

G. System Services

H. IP Security Policies

----------------------- 70-294 QUESTION 3 -----------------------

To aid with troubleshooting, you need to provide the ability for some of the other administrators in your company to perform reverse lookups on several of your servers. They need to be able to enter the IP address of the server and receive the host name of the machine in return. However, some of these machines have been configured to dynamically update their records with the DNS server and therefore you will have to enter these records manually. What type of records must you create to support reverse lookup queries?

A. Host (A)

B. Reverse Query (RQ)

C. Name Server (NS)

D. Reverse Lookup (RL)

E. Service (SRV)

F. Pointer (PTR)

To find the answers to the above three questions go to:

http://list.windowsitpro.com/t?ctl=29092:610453

__________________________________________________________

You are subscribed as news-and-stuff@arconati.us. To unsubscribe from this email newsletter use the following link:

http://list.windowsitpro.com/u?id=28351AE7DCFB1F6C8C8297A96326B1F8

Thank you, CertTutor.net Question of the Day Team

An Ignoble Experiment

Pages

Sponsor

2006/05/05

Short Takes

Is It Your Turn to Take a Bow?

2006/05/04

Permission Changes Surprise Mobile Device Administrators

Report: Microsoft Considered Yahoo! Acquisition to Defeat Google

Get Ready for Exchange & Office 2007 Roadshow

Online Backup and Recovery Strategies

Microsoft in Government: Security Guidance Center

TechNet Flash: New Sections, More Tips for IT Pros

2006/05/03

CertTutor QOW 05-03-06

Label Cloud

Popular Posts (Last 7 Days)

Blog Archive