
David Tesar writes:
If you read the only two places where ISA is compared to IAG, it doesn't really give a simple and clear comparison. I hope to do so now in this post. Please post comments if you find other comparison information out there.
They two comparisons I found are:
Secure Remote Access
IAG Frequently Asked Questions
To compare the two products, I am going to break it down into 3 major functionality categories: Forward Proxy, Reverse Proxy / Publishing, and VPN. Please keep in mind that you can run ISA and IAG independently or together in the same environment.
(
continue at source)

Virtual Machine Manager Help for Beta 2 (in the Virtual Machine Manager Administrator Console) includes a topic called “How to Convert a Physical Server to a Virtual Machine,” which tells how to perform a P2V conversion. The Help for the Windows PowerShell - Virtual Machine Manager command shell also provides an explanation, including two examples (shown below) of how to perform the conversion by using Windows PowerShell cmdlets. The following operating systems are supported on source machines for P2V conversions:
Microsoft Windows 2000 Server with Service Pack 4 (SP4) (Note: Versions before SP4 will not work.)
Microsoft Windows Server 2003 with Service Pack 1 (SP1) and later
Microsoft Windows Server 2003 R2
To view Help for P2V conversions in the Virtual Machine Manager Administrator Console:
(more)

What are the Reporting requirements? To view and use reporting in Virtual Machine Manager Beta 2 you must deploy the Virtualization Management Pack for System Center Operations Manager 2007 and set up reporting in SCVMM.
The Virtual Machine Manager Administrator Console must be installed on the Virtual Machine Manager server.
System Center Operations Manager 2007 must be deployed, and reporting must be set up in Operations Manager.
The Virtualization Management Pack must be deployed on the Operations Manager server.
To view and order reports in Virtual Machine Manager, you must use a credential with Report Operator permissions in Operations Manager.
What reports are available in Beta 2?
Reports are generated by Operations Manager but can be ordered in Virtual Machine Manager. The reporting view in the Administrator Console is not displayed until you enable reporting in Virtual Machine Manager. To see and order reports in Virtual Machine Manager, you must be an Operations Manager operator.
(more)

Let's get started by explaining what exactly the registry is. The registry is a hierarchical database that contains the value of variables in Windows and in the applications and services that run on Windows. During the setup of the Operating System, the Registry is built from template files. The Operating System and application programs store the following system configuration and user data in the registry:
* Profiles for each user
* Installed applications and the file extensions associated with each application
* Property settings for folders and program icons
* System Hardware
* Ports used for I/O Communications
OK, now that you know what it is - let's talk terminology.(
continue at source)

Greetings from Virtual Machine Manager team, thank you for your continuous support on our product. We are happy to announce that SCVMM Beta 2 is ready for download! This latest version of Virtual Machine Manager - Beta 2 - represents a major step forward in providing IT administrators with a fully featured, easy-to-use and integrated suite of management tools to tackle even the most distributed and complex virtualization migrations. While the improvements in Beta 2 are too long to list, here is a preview of the major upgrades in this release:
Completely new, easy-to-use and intuitive UI based on the System Center look-and-feel (same as System Center Operations Manager 2007, Service Desk and System Center Essentials)
Physical-to-Virtual (P2V) Conversions (Windows Server® 2000 or Windows Server 2003 are supported)
Virtual-to-Virtual (V2V) Conversions - Using the Windows PowerShell® interface, converts a VMWare disk or a whole VM to the analogous VS vhd\vm representation
64-bit VMM server support
Every VMM component is now remotely installable, including the VMM server, library server, delegated provisioning portal, administrative console and data store
Full Windows PowerShell support with documentation - automate away!
Better overall performance and scalability
Every feature from Beta 1 with more functionality and enhancements

Download:
System Center Virtual Machine Manager - Beta 2 (registration required)
Andrew Dugdell writes: "This one caught me by surprise, but it makes perfect sense I guess. Virtual Server is to to be added into WSUS. I'm not sure if this will be in readiness for the upcoming service pack, or include the updated additions. Both would be great, but we will have to wait a day or two and find out. Nate (Program Manager for Microsoft Update) has more details in the post "
New Product Family, Virtual Server, a snippet is below:"
"Virtual Server" will be added in the next one or two days. This new product family allows updates to be offered to Virtual Server components. Different categories offered under “Virtual Server” may have a different range of supported platforms. Security updates can be released through this category periodically. Due to the variety of applications/components that can reside under this product family, subscribing to this product family is recommended. To find out more about the Virtual Server product check out the Virtual Server site.

n this article we will take an early look at the new Public Folder Management console, which is included in the new Exchange Server 2007 Service Pack 1 Beta, which was recently released to TechNet Plus and MSDN subscribers. Currently there are no plans about making this early beta version available to the general public, so your organization needs to have either a TechNet Plus or MSDN subscription in order to obtain a copy.
One of the big disappointments in the Exchange Server 2007 RTM version was the lack of Public Folder management from within the Exchange Management Console (EMC) UI. In Exchange Server 2007 RTM, all Public Folder management has to be done from either the Exchange Management Shell (EMS), which is quite cumbersome to say the least, or from an Exchange 2003/2000 System Manager console on a legacy Exchange server still part of the Exchange organization.(
continue at source)

Windows Home Server Build 06.00.1371 has officially been signed off by the team and we are now making this build available to all Beta Participants. The download packages are available from download from MS Connect now.
Confidentiality
What this means to you. Now that we have announced the general availability to the public, you can now freely discuss and share screen shots of Windows Home Server CTP like you had in Beta 2, but as with all betas and any MS Intellectual Property, you are not allowed to post or redistribute the software
(more)

[H]ard|OCP has filtered and sorted through the hundreds of
Vista hints and tweaks to find the ones that they think the most readers will find useful. While Vista still feels new, these hints and tweaks might help you settle into your OS.
We searched high and low, and completed this list of tweaks so that you did not have to. We have personally tested all of these tweaks and employ most of them on our own systems.
Top 12 Vista Tweaks

Virtual private network, also referred to as
VPN, is a network that is constructed with the use of public wires to join nodes, enabling the user to create networks for the transfer of data. The systems use encryption and various other security measures to ensure that the data is not intercepted by unauthorized users. For years VPN has been used successfully but has recently become problematic due to the increase in the number of organizations encouraging roaming user access. Alternative measures have been looked at to enable this type of access. Many organizations have begun to utilize IPSec and SSL VPN as an alternative. The other new alternative being
SSTP, also referred to as ‘Microsoft’s SSL VPN’.
The article will give a clear understanding of SSTP and compare standard VPN vs SSTP VPN. The article will also cover the advantages of utilizing both SSTP and VPN simultaneously and what the benefits of using SSTP will be.(
continue at source)

Although Windows
Vista is generally compatible with applications written for Windows XP, Windows Server 2003 and their associated service packs, some compatibility issues are inevitable due to new innovations, security tightening, and increased reliability. Getting some older applications running on a new OS can be challenging at the best of times and completely frustrating at other times. And of course, life becomes a lot worse for the administrator when the problem occurs in production. We always recommend thoroughly testing for application compatibility when considering the deployment of a new OS, but it's surprising how often something gets missed! So we thought we'd provide a quick overview of some basic application compatibility testing - our 30 minute checklist for testing individual applications when you're planning your Windows Vista deployment ...(
continue at source)

Silverlight (codename WPF/E) is Microsoft’s answer to Adobe’s Flash (estimated to be running rich web based experiences on 95% of the world’s PCs and Macs). The goal is to provide the most natural and seamless method with which to design and build rich applications that transcend both desktop and web platforms. With innovative designer tools (Expression) that work easily with proven developer tools and technologies (Visual Studio and .NET) we are providing a compelling reason to develop using our tools and on our platform.
The uptake of Silverlight is going to be driven by content. The more experiences that are created with using Silverlight, the more people will download it - that's the way Flash got on 95% of the world's client computers. There's also a
nice looking website that's been created over here which gives more information on the technology and provides links to tools and resources with which you can get started.

With Windows Server Codename "Longhorn" Beta 3 just around the corner, I thought it would be an apt time to take a quick look at one of the new deployment options in Longhorn Server, namely, Server Core.
As we all know, High Availability is top of a lot of people's lists in terms of requirements when implementing a server within their infrastructure. They need these servers to be effectively running for as much time as possible, especially when you bring mission-critical systems into the mix too.

Windows Server “Longhorn” helps organisations keep their dedicated file and print servers, DHCP servers, DNS servers, and domain controllers maximally available with Windows Server “Longhorn” server core.
Now, administrators can choose to install Windows Server “Longhorn” with only core server functionality and without any extra overhead. Not only does this limit the roles that can be performed by the server, it also does away with the server graphic user interface (GUI). The result? Improved security and reduced management. This type of installation is called a Server Core installation. It does mean that your command line skills do have to be tip-top to ensure you can manipulate and work with Server Core in the way that your desire!
(more)
Mike Neil writes:
As the person who oversees the development plans, teams and strategy for Microsoft’s virtualization software on desktops and servers, I want to update everyone on the timing of our server virtualization offerings. I know that many of our customers and partners will hear of these changes from their usual Microsoft contacts, but I wanted to personally explain some of the reasons behind the new schedule for Windows Server virtualization (codename Viridian) and Virtual Server 2005 R2 service pack 1. But first, here’s where we stand today:
The public beta of Windows Server virtualization will ship in the second half of 2007, not in the first half as previously disclosed.
The final version of Virtual Server 2005 R2 service pack 1 now will be available in Q2, not Q1 as previously stated. In the interim, customers and partners can download a Release Candidate (RC) version later this month - this is code complete and an update to the current beta 2.
Up front, it’s important to know that Windows Server “Longhorn” remains on schedule for beta 3 will be this half and RTM in the second half. Iain McDonald and team are doing a great job delivering the next-generation Windows Server OS, which includes in-demand features like TS Gateway, Server Core, Network Access Protection, IIS 7.0, new server manager and failover clustering improvements … to name a few. All the work being done here is designed to deliver a safer, more secure infrastructure and simplify admin tasks. This work will help make customers’ experiences with Windows Server virtualization even better.
(more)

Terminal Services Licensing in Longhorn Beta 3 has several new features that will enable better deployment and management of Licensing environments. We addressed several customer requests in this new release of Longhorn such as per-user tracking and reporting, manual revocation of licenses, better diagnostics and support for WMI providers.
Per-User Tracking and Reporting
Prior to Longhorn, per-user licenses were not issued. Thus there was no easy way to track if the usage of per-user licenses was in line with the EULA and the licensing agreements. With Longhorn, you can easily track usage and create reports of how many per-user licenses were issued. Reports can be accessed both through the License Manager UI as well as the WMI providers.
Note that in Longhorn, per-user licenses are only tracked and not enforced.
(more)

Andy Malone writes:
Upon teaching a recent Longhorn Server MasterClass, one of my delegates asked if it was possible to connect a MAC to a Widows Longhorn Server / Vista based network. Initially it appeared that the MAC would not connect, even though it had a unique IP address etc. After much soul searching we discovered that in order for the MAC to participate we would have to downgrade to a lower level of NTLM authentication.
Basically MACs run V1 and Windows Server 2003, Longhorn & Vista run V2. To fix this small issue follow the following steps:
1. Either in Group Policy Management Console / Local Security Policy
2. Navigate to Security options – Network Security – LAN Manager Authentication
3. Double click – You will notice that V2 is the standard. To enable MAC connectivity either enable a dual V1 & V2 option or downgrade to V1
4. That’s it!
I just noticed that Microsoft has started posting the beta version of
Exchange 2007 Service Pack 1 and an Escrow build of Longhorn Server Beta 3 to Technet Plus subscribers. Download your copy
here.
(Subscribers only)


The never-ending two-step defragmenting process of
Vista can soon become a thing of the past. With certain tools, we were able to cut defragmentation time of 25 GBs of files with Vista Ultimate from 82 minutes to 6 minutes!!! That is defragmenting 10X faster than the built-in Vista defragmenter! The tutorial also works with Windows 2000 and XP.
Right now, many things are probably whirling around in your head:
- Is this true? Yes, it is.
- Does it work? Yes. We will show you charts on hard drive fragments before and after defragmentation.
- This has got to cost money. Absolutely free.
(
continue at source)

The Windows Installer
Powershell Extensions exposes Windows Installer functionality to PowerShell, providing means to query installed product and patch information and to query views on packages.
PowerShell is a powerful command shell that pipes objects, not just text. Because of this ability, you can string practically unrelated commands together in many different ways to work on different types of objects, all built on .NET
The Windows Installer extensions in this project expose cmdlets - akin to commands in a batch script - to query Windows Installer products, patches, and package databases.
Visit the Windows Installer PowerShell Extensions website @ Codeplex

In order for
RPC over Http to work you must have a Trusted CA Root
Certificate installed and configured. In a situation where you are using a self-signed cert you will need to install the certificate into the Trusted Root Certification Authorities store.
This article will guide you into installing a Self-Signed Certificate as a Trusted Root CA in Windows Vista.(
continue at source)
link

The Windows Server Performance Team is doing a series of posts on Windows Architecture:
Today we're starting a new series of posts focused on understanding the Windows System Architecture itself. In our first post, we're going to quickly review some basic Windows concepts and terms including a brief overview of the Windows API, Services and the difference between a Process and a Thread. Think of this as laying the groundwork for our future posts which will cover topics such as the Registry, Session Space and Desktop Heap. So, without further ado - let's start with an introduction to the Windows API ...
The Windows application programming interface (API) is the programming interface to the Microsoft Windows operating system family. It provides services used by all Windows-based applications to enable applications to provide a Graphical User Interface (GUI), access system resources, incorporate audio and much more. The API consists of thousands of documented, callable subroutines such as CreateProcess and CreateFile. Major categories of Windows API functions include Base Services, Component Services, Graphics & Multimedia, Messaging, Networking and Web Services.(
more)
Jalasoft has posted some more information about their upcoming Xian IO product for Operations Manager 2007 on their website:
Extending the Monitoring of Distributed Applications with System Center Operations Manager 2007 to Heterogeneous Environments.
Determining the origin of performance problems in distributed systems requires end-to-end monitoring of all components, since a bottleneck or problem may occur in any of the elements of the data flows. Extending the new Distributed Applications feature of Ops Mgr 2007 to network devices and UNIX servers makes Xian Network Manager a powerful and unique tool which enables system administrators to grasp control of their infrastructure.
Monitoring Distributed Applications withXian Network Manager Io

Xian Network Manager Io is not just another MOM “management pack”or add-on. Xian Io offers an out of the box integration between OpsMgr 07, network devices, Unix servers and applications. An intelligentdesign enables Xian Io to guarantee the scalability of the system. Xian Io’s Network Scan Server, scans your whole network and starts monitoring immediately according to a predefined, but customizableset of rules. Our new smart Management pack Generator lets youcreate smart management packs for Xian Io and Ops Mgr 07 in a snap.Finally, Integration with Ops Mgr 07 provides you with a single console.
Three sessions will be held during the month of April on the following days:
Thursday, April 5th – 12:00 P.M. EST (Eastern Standard Time)
Thursday, April 19th – 12:00 P.M. EST (Eastern Standard Time)
Thursday, April 26th - 12:00 P.M. EST (Eastern Standard Time) (more)
Sean writes:
If you designed websites (even for a club or small business) in the mid-90's, you recall the experience of working with tables and invisible GIFs for layout, proprietary HTML tags (ie: marquee), scrolling banners, and the popularity of the starfield as a webpage background. The Heaven's Gate Cult followed these design principles, and as you can see in the pictorial history below, it appears that we did so at Microsoft as well. Enjoy the progression!
History of microsoft.com (1994-2007)


My good friend
Pete Zerger has posted an excellent article about the "Unknown Health State" in Operations Manager 2007:
Pete Zerger: “What is the logic moving status for an uncommunicative agent to the grey(unknown) status in representing object state, rather than simply assuming a down state and moving state to red?”
Jakub Olesky: “We actually do go red and do generate an alert, just not for the computer directly. We have a notion of a health service watcher that is monitoring the availability of the health services. If a health service fails to heartbeat for 3 consecutive intervals, that health service and anything monitored by it (including the computer) goes grey (i.e. unavailable)."
Continue to the article:
Unknown State for Ops Mgr 2007 Agent Health Service Explained


System Center Operations Manager 2007 is next version of Microsoft’s award winning event and performance monitoring solution Microsoft Operations Manager.
These videos are part of the Operations Console user interface and are also hosted in streaming format on the System Center Operations Manager 2007
Webcasts page. From there you can get details on the presenter as well as date posted and running time information.
System Center Operations Manager 2007 Webcasts (.WMV)

Thank you for your participation in the
Windows Vista Hardware Assessment Beta Program earlier this year. The V1.0 release has been well received but we're not done. The Microsoft Solution Accelerators Team is now designing the V2.0 release with more robust and scalable features to make it even easier for businesses around the world to determine their Windows Vista readiness network-wide.
Please follow the steps below and apply for the Windows Vista Hardware Assessment v2.0 Beta Program:
1) Visit Connect Site:
http://connect.microsoft.com
2) Sign in with your Microsoft Live ID
3) Click AVAILABLE CONNECTIONS on the Left-Navigation Bar
4) Scroll to the Bottom of the Web Page
5) Click APPLY link next to "
Windows Vista Hardware Assessment V2.0 Beta Program"
6) Follow the rest of the on-screen instructions to apply
Neale Brown, author for
systemcenterforum.org writes:
Ever wanted an easy way to export a certain number of alerts (depending on the search criteria) for use later? Well, Operations Manager 2007 gives us that power using its Powershell provider. To use this functionality, you will need to use the Command Shell that is group with Operations Manager 2007 in the Start Menu. You can also invoke Command Shell from within the UI through the Monitoring Pane. Well, to get a list of all alerts from your management group, just run the following command:
PS Monitoring:\NOCRMS01.noc.momresources.org > Get-Alert
Continue his excellent article here:
Exporting open OpsMgr 2007 alerts to HTML through Powershell

HP delivers new management packs that complement and extend Microsoft Systems Center Operations Manager (SCOM)2007, integrating alert processing and state monitoring for HP StorageWorks products.
HP StorageWorks MP for Operations Manager 2007
UPDATE: It seems that the download link on their webpage still directs you to the MOM 2005 version
Issue: After running the "Feature Configuration Wizard" it may take up to 24 before computers are properly configured to be discovered. The Computer Discovery Wizard may not successfully discover some computers because they do not have the proper policies yet applied via Group Policy.
Cause: This is because Group Policy can take up to 24 hours to replicate depending on your site's configuration. So some computers may not have thier firewalls properly configured before you attempt to run the Discovery Wizard.
Workaround: After running the Feature Configuration Wizard, you can log onto a target computer and run the following command from the command line: gpupdate /force

Working on a System Center Operations Manager 2007 installation? Microsoft has released several knowledgebase articles the past days, which could be helpful:
Operations Manager 2007: Test Notification settings after configuring recipient and/or subscription
Operations Manager 2007: Web Application Editor recorder returns error after installing IE7
Operations Manager 2007 Agent fails to install after previous failed attempt
Operations Manager 2007: Prerequisite Checker indicates that ASP.Net is not installed
Operations Manager 2007: Graphic that contains a red X may appear in a report

When using System Center Operations Manager 2007 RTM, sometimes you'll notice that in the "Computers" state view in the Monitoring pane, contain computernames will show up as "Not Monitored" while you did not install an agent on them. This only occurs if you've got Agentless Exception Monitoring enabled and (Dr.Watson) clients reporting to the management server. The MOM product team commented that this behavior is "by design". Computers that report an application crash or blue screen, are added to the list of the "Computers" state view.
There's a fairly simple "workaround" to only view the Health of the computers that have agents installed. Right click the "Computers" state view, click "Properties" and change the value from
(All) to
All Computers in the "Show data contained in a specific group" section, by using the "..." button:

In my humble opinion, this should be the default behavior of that state view. This is really something that confuses people. Hopefully they will reconsider for Service Pack 1 or the R2 release.
Active Directory is one of the most critical services in a Windows network. To avoid downtime and loss of productivity, it’s essential that you have effective disaster recovery plans in place for problems related to Active Directory. This point may sound obvious, but it’s amazing how many administrators don’t have a plan for one of the most common Active Directory® failure scenarios: accidental deletion of data.
Accidental deletion of objects is one of the most common root causes of service failure. When I do seminars and conferences, I often ask who has had an Active Directory failure due to accidental deletion of data. And every time, nearly everyone raises his hand.To understand why data recovery is so complex, you first need to understand the following: how Active Directory stores and replicates objects, how it deletes objects, and the mechanics of authoritative and non-authoritative restores.(
more)
DEP (Data Execution Prevention) is a slightly overloaded term that refers to a set of hardware and software technologies that we have implemented (with support from Intel / AMD) to make it harder to exploit security vulnerabilities on Windows. On
Vista - if your processor supports hardware enforced 'no execute' or 'execute disable' bits (i.e. 'NX' on AMD and 'XD' on Intel CPU's) you will have hardware DEP enabled by default for most Windows applications with a few notable exceptions. If your processor does not support the 'no execute' bit - you'll only get software DEP protections which is still better than nothing but not as good as hardware DEP and easier to bypass / defeat. (NOTE: This is essentially the same behavior that was introduced on XP Service Pack 2).
Hardware DEP works by setting a special bit in a PTE (page table entry) which is an object used by the
VMM (virtual memory manager) to map virtual memory addresses to physical memory addresses. If an attempt is made to execute code from a virtual memory page that has been marked as non-executable (via the bit being set in the PTE for that page), the processor will raise an exception and the OS can then end the application or bring down the entire OS (if the exception is raised in kernel mode code). Hardware DEP + ASLR is a good thing when used together as it signficantly raises the bar for those seeking to exploit security vulnerabilities like the recent ANI file 0-day.(
more)

Windows Update has no knowledge of Embedded as an OS platform, therefore there is no built-in logic to assess what features (and files) are present on the runtime. This means that Windows Update would blindly push down all security updates that were not already present on the runtime, whether they were appropriate or not. There are a number of reasons why this is a scary scenario:
- Windows update packages include a payload that contains previous versions of files, which facilitates "roll-back" to a previous version of a file if the updated one causes a problem. This has footprint implications, because the install packages may be bigger than desired on an Embedded device. Also, XP Embedded does not support Add/Remove, so it would not support rolling back to a previous version.
- XP Embedded does not have Windows File Protection. This means there is nothing to prevent the updated version of a file from overwriting the original one and causing other applications and features to break because of versions incompatibility.
- Applying unnecessary updates to the device could cause it to run out of disk or memory space and to crash- having your Embedded device "blue-screen" in the field is not on any customer's wish list.
Ultimately the owner of the image would lose all control of that image, and not be able to reliably see what state it was in.

Many customers have asked us about when