Microsoft has revealed plans to release a third service pack for its flagship Windows XP operating system.
"There will be a Service Pack 3 (SP3) for Windows XP," Bernard Ourghanlian, technical and security director at Microsoft France, confirmed, revealing that Microsoft's OS is set for another major evolution.
Windows XP's Service Pack 2, which came out in September 2004, has already deeply modified the operating system by updating its security.
Windows XP SP3 will be available in the course of next year, a priori after the launch of Windows Vista, which "is the priority for the development teams", according to Microsoft France.
Microsoft has yet to reveal any details about the contents of the service pack. Laurent Delaporte, assistant MD at Microsoft France said: "Historically, certain functions of new versions of Windows are integrated in the service packs of previous versions."
It's therefore likely that some of the less significant features of Vista will make an appearance in Windows XP SP3.
Recently Microsoft released a white paper on how to configure and use Windows System Resource Manager to manage Clusters. For those of you not familiar with WSRM, it’s a free product that comes with Windows Server 2003, Enterprise Edition or DataCenter – both of which you can run a cluster on today. Here are a few features of WSRM:
Set CPU and memory allocation policies on applications. This includes selecting processes to be managed, and setting resource usage targets or limits.
Manage CPU utilization (percent CPU in use).
Limit the process working set size (physical resident pages in use).
Manage committed memory (pagefile usage).
Apply policies to users or groups on a Terminal Services application server.
Apply policies on a date/time schedule.
Generate, store, view, and export resource utilization accounting records for management, service level agreement (SLA) tracking, and charge-back purposes.
Basically you ensure with WSRM that your clustered application gets the resources it needs and so does your base OS. This way Exchange or SQL gets everything it can without impacting normal operations. The article correctly states that WSRM is not cluster-aware. It will monitor individual computers in a cluster I would follow the best practice of configuring each clustered node with WSRM and identical resource allocation policies, process matching criteria, and other components of WSRM. Scripting the process is an excellent way to configure WSRM, as the articles title suggests.
Whitepaper: Using WSRM and Scripts to Manage Clusters
Russ Kaufmann writes: "SP1 for Exchange Server 2003 can be installed by an Exchange administrator for the administrative group where the Exchange server lives and a local administrator on the Exchange server. Things have changed, though, for SP2. Now, for SP2, the initial installation must be done by an Exchange Administrator at the organization level. The reason it has to be done at the organization level is because the Intelligent Message Filter (IMF) is part of SP2 and it requires and Org level Admin to install it properly. After the first install is done, then Exchange Admins can perform the installations in their administrative groups."
Note 1: If IMF versions before 2.0 are installed, SP2 will require that they be removed before installing SP2.
Note 2: IMF will be installed on cluster nodes but will be disabled and will not function on cluster nodes as it is not supported in Exchange clustering.
Russ Kaufmann's Weblog
The Microsoft Operations Manager 2005 Availability Reporting Management Pack collects and analyzes data from the event logs of your servers, and generates reports that you can study to improve server availability and reliability. You can identify the causes for planned and unplanned downtime and take preemptive actions to decrease downtime in the future.
Availability Reporting uses a number of metrics to provides data that you can view and customize to suit the needs of your IT organization. Each type of report includes tables or graphs with information about the availability and reliability of servers in your environment. You can input parameters, such as specific periods of time, to filter the data presented in the reports.
MOM 2005 Availability Reporting Management Pack
This SMS Advanced Client.MSI has been released for the Microsoft Systems Management Server (SMS) 2003 Service Pack (SP) 1 Advanced Client. This software update adds support for the SMS 2003 Inventory Tool for Microsoft Updates.
This MSI also includes individual SMS 2003 SP1 Advanced Client Windows Installer update packages (.msp). This MSI can be used to update existing SMS 2003 Advanced clients or can be deployed to install new SMS Advanced Client systems in an SMS 2003 SP1 environment. The individual Windows Installer package can be used to update existing SMS 2003 Advanced Clients.
Download SMS 2003 SP1 Updated Advanced Client
The IPSec Policy Agent (IPsecsvc.dll) manages Internet Protocol security policy. The IPSec Policy Agent starts the ISAKMP/Oakley (IKE) protocol mechanism. The IPSec Policy Agent also starts the Internet Protocol security driver that is available for Microsoft Windows Server 2003 and for Microsoft Windows XP. The IPSec Policy Agent includes a set of remote procedure call (RPC)-based interfaces. These interfaces are used by internal Windows components.
Microsoft has released a hotfix that corrects the behavior of the IPSec Policy Agent. After you apply this hotfix, a calling program can better provide its services.
Update for Windows Server 2003
Update for Windows Server 2003 64-bit Itanium Edition
Update for Windows Server x64 Edition
Update for Windows XP
Update for Windows XP x64 Edition
The Active Directory Migration Tool version 3 (ADMT v3) simplifies the process of restructuring your operating environment to meet the needs of your organization. You can use ADMT v3 to migrate users, groups, and computers from Microsoft® Windows NT® 4.0 domains to Active Directory® directory service domains; between Active Directory domains in different forests (interforest migration); and between Active Directory domains in the same forest (intraforest migration). ADMT v3 also performs security translation from Windows NT 4.0 domains to Active Directory domains and between Active Directory domains in different forests.
Download Active Directory Migration tool v3.0
Microsoft® Office Project Server 2003 Service Pack 2 contains significant security enhancements as well as stability and performance improvements. Some of the fixes included with SP2 have been previously released as separate updates. This service pack combines them into one update.
This service pack also includes
Project Server 2003 Service Pack 1 previously released for Project Server 2003. Project Server 2003 SP2 will install even if Service Pack 1 has already been installed on your computer.
Project Server 2003 SP2 also includes stability improvements developed as a result of user input from the Microsoft Online Crash Analysis in Project Server 2003 and from Microsoft Product Support feedback.
You can get specific information about this update in the Microsoft Knowledge Base article
(887621): Overview of the Project Server 2003 Service Pack 2.
Microsoft has released Service Pack 2 for SharePoint Services 2003. This service pack includes support for running SharePoint on a 64-bit system, support for SQL Server 2005, and ASP.NET 2.0.
The WSS SP 2 release has substantial supportability improvements including:
- Support for running on 64-bit machines in 32-bit emulation mode
- Support for Reverse Proxy and Alternate URL support
- Support for IP Bound virtual servers
- Support for off-box SSL termination
- Support for SQL Server 2005
- Support for ASP.NET 2.0
Download from SharePoint SP2
Ok, so some dude in Germany claims to have gotten their hands on a copy of iTunes for Windows Mobile 5.0. Let’s just get it right out of the way that we think this is fake. Or at least that we’re going to assume this is fake until we get some sort independent verification (email us the app already!). And you also have to wonder why exactly Apple would bother making a version of iTunes for Windows Mobile devices when they’ve been so reluctant to let even a single phone (the ROKR E1) run a mobile version of iTunes. It doesn’t really make a whole lot of sense, but there are at least three possible explanations for what’s going on here:
- This is real, and Apple has some sort of amazing reason for doing this.
- The pics are fake and this is all an elaborate hoax.
- This isn’t an Apple product and was instead created by some sketchy developer decided to mimic the look and feel of iTunes.
The true test would be whether or not a Pocket PC with iTunes would be able to play FairPlay DRM protected AAC files, but conveniently enough the person hasn’t been able to sync with iTunes on a Mac or PC because they lack the necessary drivers.
Microsoft on Tuesday released a beta of Windows Storage Server 2003 R2, which will include enhancements for storage management, collaboration and branch usage.
Windows Storage Server 2003 R2, previously known by the code-name "Storm," is the second generation of Microsoft's dedicated file server. The product is sold exclusively by OEMs as part of a complete hardware-software file server solution.
The product roadmap calls for a release to manufacturing by the end of 2005 with the rest of the Windows Server 2003 R2 editions. Allowing OEMs some time to build and test systems with the gold code, Microsoft does not plan a formal launch of Windows Storage Server 2003 R2 until April.(
continue at source)
Microsoft Tuesday released the latest aggregated group of updates, Service Pack 2, for its Office 2003 suite. Included are significant security enhancements, in addition to stability and performance improvements.
Some of the fixes included with Office 2003 SP2 have been previously released as separate updates; the service pack combines them into one update.
The most noteworthy enhancement is the addition of a new Phishing Protection feature to Outlook 2003's Junk E-mail Filter. This feature will be turned on by default for users who have Office 2003 SP2 and the latest Outlook 2003 Junk E-mail Filter Update.
Phishing is the luring of sensitive information through e-mail, such as passwords and other personal information, by an attacker masquerading as someone trustworthy.
Coming from Brian Madden:
A lot of information about the new features of Terminal Server in Longhorn has come out over the past few weeks. In this article, I’ve collected, organized, and commented on all the new stuff.
It’s important to note that the information in this article is all public information from Microsoft. (i.e. it’s “real.”) This is NOT rumor or speculation. Most of this information came from last week’s Microsoft Technet Terminal Server chat and the Channel 9 Terminal Server Product Group video.
(
continue at source)
Active Directory with Windows Server 2003 R2 includes Active Directory Federation Services.
Active Directory Federation Services, or ADFS for short, is the new Microsoft Web services technology that allows for companies to pursue Web based transactions with business partners (Business to Business or B2B) securely. When working with other companies you sometimes need to allows clients to access resources in your domain, or vice versa. Because of the nature of the Internet, resource sharing can always be nerve racking - there is more security that needs to be implemented and that technology is called WS-Federation. Most times, making Web transactions can be deemed insecure, and if you need to maintain identity information for outside business partners and customers, ADFS is for you. Integrated tightly with Active Directory, ADFS helps to keep Web transactions secure. (
continue at source)
Microsoft® Windows® Vista™ Beta 1 and Windows Server™ "Longhorn" Beta 1 include a new implementation of the TCP/IP protocol suite known as the Next Generation TCP/IP stack.
The TCP/IP protocol stack provided with Windows XP and Windows Server 2003 was originally designed in the early 1990s and was modified and enhanced over time to meet the needs of home and enterprise users.
The Next Generation TCP/IP stack in Windows Vista and Windows Server "Longhorn" is a complete redesign of TCP/IP functionality for both Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6) that meets the connectivity and performance needs of today's varied networking environments and technologies.(
continue at source)
Microsoft and Intel are throwing their full weight behind one side in the long-running battle over the format for the next generation of high-definition DVD's.
Today, the two companies will announce that they are backing the HD-DVD format developed by Toshiba over the Blu-ray standard championed by Sony, Matsushita Electric, Samsung and others. Microsoft announced in June that it would work with Toshiba to develop high-definition DVD players. Now, Microsoft and Intel say they will develop software and chips that will allow personal computers to play the next-generation DVD's from Toshiba.
The companies said they had not ruled out incorporating Blu-ray technology in their operating systems and on their chips in the future. But they are convinced that as of now, the HD-DVD format discs can be produced more cheaply and more quickly than the Blu-ray discs, and are therefore likely to become the dominant technology.
For the last two years, Microsoft and Intel have been careful not to alienate either camp in the format battle because they sell software and components to companies on each side. They also hoped that the electronics makers and Hollywood studios developing the formats would reach a compromise.
But the major Hollywood studios are now split between the formats, and electronics companies on both sides plan to start selling next-generation DVD players as early as Christmas. Sony also plans to include Blu-ray technology in its new PlayStation 3 game console to be released next spring. (Continue at source, registration might be required)
Microsoft released serveral Service Packs today.
Here is a list:
Microsoft Corp. today announced the immediate general availability of Microsoft® System Center Data Protection Manager (DPM), the next step forward in the company’s Universal Distributed Storage strategy.
Bob Muglia (
interview), senior vice president of the Windows Server™ Division, will make the announcement during his keynote address at the Storage Decisions conference this evening at 6 p.m. Data Protection Manager promises to lower the total cost of ownership for backup and recovery while enabling entirely new customer scenarios around rapid and reliable recovery and near-continuous protection.(
continue at source)
Goto the System Center Data Protection Manager Website
Today Microsoft signed off on Team Foundation Beta 3! If you used beta 2, beta 3 is a vast improvement. Beta 3 should hopefully show up on MSDN in about two days. You may remember that beta 3 has the go-live license and will be supported for migration to the final release version 1, which means this is the last time you have to start from scratch. With beta 3, single-server installation is once again supported! I know many people didn't install the July CTP because of the lack of a single-server installation. With each public release, installation has gotten easier and more reliable, and this is the best installation thus far.
Visual Studio 2005 Team Foundation Server provides team collaboration tools that enable organizations to manage and track the progress and health of software projects. Team Explorer integrates the project work products found on the project site into the Visual Studio IDE for efficient team access. Team Foundation also provides extensible work item tracking and enterprise-class version control systems.
Visual Studio 2005 Team System
For companies that make public key encryption and smart cards part of their security strategy, Microsoft's acquisition of Alacris Inc., and the subsequent integration of this technology into Windows, could potentially cut time and expenses out of otherwise costly projects.
Microsoft acquired the identity and certificate management software vendor earlier this week for an undisclosed sum.
The acquisition choice of Ottawa, Canada-based Alacris is logical given that Alacris' software is already tailored to work with Windows, experts said. Some of Alacris's competitors, such as Bell ID, Rotterdam, The Netherlands, and U.K.-based Intercede Group PLC, are more focused on heterogeneous environments, said Trent Henry, a senior analyst at Burton Group, a Midvale, Utah, consulting company.
Alacris software helps streamline the management of smart cards and digital certificates, but the technology can also be used for secure VPN, IPsec and Web-based SSL certificates. (Continue at source).
One of the easiest ways for crackers to exploit holes in your system is through open services. And lately, viruses have been masquerading as services listed in the Task Manager, making them harder to detect, clean and prevent. When you audit and close unused services, in addition to security benefits, you receive performance enhancement because stagnant programs aren't taking up available resources. Besides, a full security audit of your service can reveal some interesting details about your machine.
Peruse the following list of best practices and consider implementing them.
- Give strong passwords to service accounts. When you install applications that require services to run, you are typically given the option to choose an account under which the service is to be run. Use 15+ character passwords, and remember that you must set these passwords both in Active Directory Users and Computers or Computer Management (depending on your operating environment) and in the Log-On tab of the service's property sheet.
- Never let users log on using service accounts. This particularly applies to the Administrator account -- never assign the Administrator account to a service, and never distribute any service account name and password to any users. There is absolutely no reason to do so, and if users can access systems in these contexts, they can wreak more havoc than you could imagine. Just don't do it.
- Do not allow network access to service accounts. For one, this means don't create domain accounts for services. Wherever possible, use a local account on the server where the service is located. Also, check the "Deny Access to this Computer from the Network" right within the service account's property sheet to eliminate network access for that account.
- Use accounts of least privilege for service accounts. Windows XP includes a great set of built-in accounts, collectively called the Network Service and Local Service. They are specifically designed to be used for services that require different amounts of network connectivity. Use these where possible to decrease the attack surface of services.
Windows XP comes with only two services that require open access to an external interface for normal operation: Terminal Services, or Remote Desktop Connection, and the Remote Access Service for answering dial-in calls.
(Continue at source).
"Google has released Firefox search toolbar (Version 1.0.20050923) after two months in beta. One interesting addition is Google Suggest, which guesses what you're typing and offers useful suggestions in real time."
Main features:
Google Suggest
Get query suggestions as you type in the search box
SpellCheck
Check your spelling whenever you type in web forms
AutoFill
Automatically fill out forms for faster online shopping
WordTranslator
Translate English words into other languages
Auto Link
Create a link to a map based on searched address
Download Google Toolbar for Firefox
There are two new downloads from Microsoft with publish dates of last week. The first is Internet Explorer 6 SP1, for systems that are not XP SP2. Not a lot of detail or documentation available on this yet. It shows a publish date of 21 Sept 2005.
Download Internet Explorer 6 Service Pack 1
The second is an update Security Fix for DirectX 8 on Windows 2000, Windows ME, Windows 98 SE, and Windows 98. The KB article does not appear to have been updated, but the download has a publish date of 22 Sept 2005. The original advisory was MS03-030.
Download DirectX 8
Shared computers are commonly found in schools, libraries, Internet and gaming cafés, community centers, and other locations. Often, non-technical personnel are asked to manage shared computers in addition to their primary responsibilities.
Managing shared computers can be difficult, time-consuming, and expensive. Without restrictions, users can change the desktop appearance, reconfigure system settings, and introduce spyware, viruses, and other harmful programs. Repairing damaged shared computers costs significant time and effort. User privacy is also an issue. Shared computers often use shared accounts that make Internet history, saved documents, and cached Web pages available to subsequent users.
The Microsoft Shared Computer Toolkit for Windows XP provides a simple and effective way to defend shared computers from untrusted users and malicious software, safeguard system resources, and enhance and simplify the user experience. The Toolkit runs on genuine copies of Windows XP Professional, Windows XP Home Edition, and Windows XP Tablet PC Edition. This download includes a comprehensive, 107-page Handbook in PDF format. (Continue at source).
Download the Toolkit
Read the online handbook
Brian Madden posted a podcast of a presentation he gave at the Tyson's Corner Marriott on August 18, 2005. The topic was Citrix and VMware—how these two technologies work together today, and the larger role that virtualization will play in the future. In this hour-long speech, he talks very broadly about the future of Citrix, Windows applications, and virtualization in general. Specific topics include:
- The history of VMware and Citrix, why they got together
- Scalability. Does VMware help? How will 64-bit Windows will change this?
- A brief mention of the kernel memory changes from Windows 2000 to Windows 2003
- How does VMware affect consolidation strategies?
- When should you use VMware with Citrix, when not to?
- VMware ACE: Where can that be used with Citrix? Should you use that for Citrix or just do that natively?
- Citrix Access Gateway and Smart Access
- Future of utilization of servers
and more
Download MP3 of this show |
Stream this show live
Microsoft has released sample code and documentation that shows how to develop applications using Windows Communication Framework with the new "InfoCard" features for providing secure identity services. Also included are samples on how to create security token services.
Installation of the Resource Kit is, as usual, dependent of having the proper configuration of CTPs. Here is a step-by-step guide for installing and using the resource kit from Kim Cameron's Identity Blog.
As the name indicates, this release only works with WinFX Sept 2005 CTP and VS 2005 Extensions for Sept 2005 CTP. Please install in the following order:
- If you'd like to use the STS samples, please install IIS prior to installing WinFX Sept 2005 CTP.
- Then install WinFX Sept 2005 CTP
- Next install Visual Studio Extensions for Sept 2005 CTP
- WinFX and VS 2005 are installed, please download the resource kit
Palm has decided to run its next generation of PDAs on Windows Mobile 5, after having failed to buy back its own former software division, PalmSource. According to Business Week, "The sale of PalmSource, the software arm spun out of the former Palm Computer in 2002, will also affect the future of Palm OS. PalmSource had been struggling both to find more customers and to get its products, particularly a simpler operating system for cell phones, to market.
Earlier this year, it sold its share of the Palm trademarks back to the hardware arm and put itself up for sale."
As Microsoft's appeal against existing antitrust sanctions continue, the European competition commissioner, Neelie Kroes, has revealed that the European Commission is reviewing fresh antitrust complaints made against the company.
In an interview with the New York Times, Ms Kroes said the competition commission had received a number of informal complaints against Microsoft's bundling of applications since she took office in November 2004.
European Commission spokesperson, Jonathan Todd, confirmed that the competition commission is considering the complaints but said that no decision has been taken on a course of action, adding that the commission does not have to wait for formal complaints to take action against a company it suspects of anti-competitive behavior. Neither Ms Kroes nor Mr Todd revealed any details of the new complaints.
Microsoft is in the process of appealing a record E497.2m ($613m) fine and other remedies imposed by Mario Monti, Ms Kroes' predecessor as EC competition commissioner. In June, Microsoft launched a version of its Windows XP operating system without Windows Media Player, but conforming to other sanctions has not been as smooth.
The DPM team writes: "Data Protection Manager 2006 will be
launched next week. And we made our commitment: the DPM Operations Guide is live and online in advance of launch. This is our final piece of major product documentation. The Planning and Deployment Guide and Help were made available earlier this summer. Still to come: DPM Frequently Asked Questions, which will contain instructions for upgrading DPM beta to the released version."
Data Protection Manager 2006 Operations Guide
Cardtrap.A transfers two Windows worms when the memory card is inserted into the PC.
"When infecting Symbian phone the Cardtrap.A copies two Windows worms Win32/Padobot.Z and Win32/Rays into the phones memory card," said Jarno Niemela, a virus researcher writing on the company's weblog. "Padobot.Z is copied with autostart.inf file in attempt to start automatically if the card is inserted to PC using windows. Rays is copied with filename System and same icon as system folder."
According to F-Secure the virus is the first of its kind. It attempts to catch out the more experienced user who would link an infected mobile phone to a PC in an attempt to remove the mobile virus. But the virus itself may currently be ineffective.
"To our knowledge no Windows version support autostart from a memory card," said Niemela. "But it still might work with some Windows versions and third party driver combination." (Continue at source).
By way of Robert Scoble comes a Channel 9 video interview of three of Microsoft's networking rocket scientists whose job it is to build better networking technologies into Windows Vista as well as Longhorn server. Both client and server will use the exact same stack. In the interview, Scoble asks what his mother will get out of the work they're doing (and later makes some inquiries on behalf of developers too).
The new technology enables Windows' built-in firewall to engage in outbound blocking including granular control over what applications have access to the network. Thanks to the new Vista driver model, new firewall drivers can be dynamically added and removed without tearing down the connection.
On the performance front, one of the interviewees said that the performance improvements may be so good that it will be frightening. The new networking stack will do what's calld receive side scalling. The new stack will also include significant improvements in traffic throttling. (Continue at source).
Watch the complete interview
In short, XSync is a program based on Microsoft's ADMT, a tool that's used to migrate data between Active Directory domains.
Ever came across the need to create a test environment identical to your own production environment? What about creating an R&D environment?
The biggest advantage with using XSync is that the whole domain synchronization process is completely automated. just set the preferences with a few simple clicks and after a few moments you have perfect copy of your domain, or depending on the chosen option, another domain with your entire active directory info inside it.
This program is simple to use and requires very little configuration.
XSync can be run on Windows2K/2K3 and Windows XP,
Supports Synchronization between WinNT 4.0 SP6 Domains and above.
Download XSync here
Microsoft will reorganize into three newly formed divisions, each of which will be led by its own president. In addition, the company said Ray Ozzie will expand his role as chief technical officer by assuming responsibility for helping drive its software-based services strategy and execution across all three divisions, and Jim Allchin will retire at the end of 2006 following the commercial release of Windows Vista. The three divisions are:
- the Microsoft Platform Products & Services Division, which will be led by Kevin Johnson and Jim Allchin as co-presidents. This division comprises Windows Client, Server and Tools, and MSN.
- the Microsoft Business Division, which will be headed by Jeff Raikes as president. This division will deliver software and software-based services that enable organizations to succeed in constantly evolving workplace by amplifying the impact of their people.
- the Microsoft Entertainment & Devices Division, which will be headed by Robbie Bach.
MakeShortcuts is a simple straight forward tool that I wrote today (ahum yesterday it's now past midnight...) that can create shortcuts in the Windows Start Menu based on an INI file.
Layout of the INI file:
[Application Name]
startpath=tool.exe
menulocation=Programs\Tools
arguments=/s
iconpath=c:\windows\system32\moricons.dll
iconnumber=0
scope=U
- Startpath is the full path to an executable or associated extension Application Name, startpath and menulocation are mandetory, the other entries are optional
- Scope can be U or A, where 'U' will crate the shortcut for the current logged on user and 'A' will create the shortcut for all users
- Menulocation is the folder to create the shortcuts in, if it does not yet exist it will be created. You can specify more levels of menus by seperating each level with a '\'.
- The INI file can contain multiple items
- The sample INI file included in the zip file below contains definitions for some Sysinternals Tools, you probably have to change some pathnames to make it work for your setup.
Command syntax: MakeShortcuts .\inifile.ini
Download MakeShortcuts (23KB)
Single-image download and execution with no setup program has been a hallmark of almos
