Media

SCE Vs. VMware: How Do They Compare?

Kimberly Bolton — Sat, 21 Nov 2009 00:43:00 GMT

Edwin Yuen discusses how Microsoft's newest virtualization products--namely System Center Essentials 2010 and Hyper-V--stack up against existing VMware offerings. He highlights how SCE and Hyper-V are great choices for the small-to-mid-sized company that wants a cost-effective, easy to deploy and manage yet full-featured virtual solution. The presentation ends with resource links for more information on obtaining Hyper-V (a free download) and SCE 2010 (currently in beta).

Messagerie instantannée et Outlook Web App dans Exchange 2010

Damien Caro — Fri, 20 Nov 2009 21:59:00 GMT

Avec Outlook Web App (OWA) de Exchange 2010, il est possible de réaliser une intégration avancée avec Office Communication Server 2007 R2.
Cette intégration permet d'afficher sa disponbilité, de voir celle de ses correspondant et de démarrer ou continuer une conversation en messagerie instantannée avec ses correspondants.
Cette vidéo montre les étapes à suivre pour activer cette intégration de Exchange 2010 avec OCS 2007 R2.

Visio 2010 Process Diagrams: Drawing on Experience with Mark Nelson

Harry Miller — Fri, 20 Nov 2009 21:00:00 GMT

Visio 2010 has new features specifically for process diagrams, such as cross-functional flowcharts (swimlane diagrams) and BPMN diagrams.

Mark Nelson, the lead PM on the Visio team for these features, shows how they work using the Beta version of Visio.

Technet Online 2009: Exchange Server 2010 - technické představení

Karel Florian (KFL) — Fri, 20 Nov 2009 14:58:00 GMT

Záznam z akce Technet Online. Tato přednáška si kladla za cíl technické představení nových funkcí Exchange Serveru 2010.

Hovoří Martin Pavlis (MVP).

Technet Online 2009: Sharepoint 2010 a Office 2010 - představení

Karel Florian (KFL) — Fri, 20 Nov 2009 14:02:00 GMT

Záznam z akce Technet Online. Tato přednáška vás technicky seznámí s novými funkcemi Sharepoint Serveru 2010 ve spolupráci s Microsoft Office 2010.

Mluví Štěpán Bechynský (Microsoft).

Technet Online 2009: Windows 7 - technické představení

Karel Florian (KFL) — Fri, 20 Nov 2009 12:36:00 GMT

Záznam z akce Technet Online. Tato přednáška vás technicky seznámí s novým klientským operačním systémem Windows 7.

Mluví Ondřej Výšek.

Technet Online 2009: Windows Server 2008 R2 - technické představení

Karel Florian (KFL) — Fri, 20 Nov 2009 12:35:00 GMT

Záznam z akce Technet Online. Tato přednáška si kladla za cíl technické představení nových funkcí Windows Serveru 2008 R2.

Hovoří Martin Pavlis (MVP).

Technet Online 2009: Windows 7 a Windows Server 2008 R2 Launch

Karel Florian (KFL) — Fri, 20 Nov 2009 11:51:00 GMT

Záznam z akce Technet Online. Tato přednáška si kladla za cíl de facto uvedení obou produktů na český trh a jejich obecné představení.

Hovoří Lukáš Křovák (Microsoft) a Martin Pavlis (MVP).

Windows 7 DirectAccess Explained

yung — Fri, 20 Nov 2009 08:01:00 GMT

The Windows® 7 and Windows Server® 2008 R2 operating systems introduce DirectAccess, a new solution that provides users with the same experience working remotely as they would have when working in the office.

With DirectAccess, remote users can access corporate file shares, Web sites, and applications without connecting to a virtual private network (VPN), as shown in Windows 7 DirectAccess User Experience. Further, DirectAccess separates intranet traffic from Internet traffic, as shown on the left, and reduces unnecessary traffic on the corporate network.

DirectAccess requirements include:

DirectAccess Server: This is a Windows Server 2008 R2 server with the server feature, DirectAccess Management Console, added. A DirectAccess server must be joined to an Active Directory® domain and cannot be behind a Network Address Translation, or NAT, device. In addition, a DirectAccess server must have two network adapters: one connected to the Intranet, and the other to the Internet with at least two, consecutive, public, IPv4 addresses.
DirectAccess Client: Windows 7 is the supported client OS.
At least one domain controller and Domain Name System (DNS) server is Windows Server 2008 SP2 or Windows Server 2008 R2.
A Public Key Infrastructure (PKI) for issuing computer certificates, smart card certificates, and, for Network Access Protection (NAP), health certificates
IPsec policies to specify protection for traffic
IPv6 transition technologies, i.e. ISATAP (RFC 4214), Teredo (RFC 4380), and 6to4 (RFC 3056), for DirectAccess server
Optionally, a non-Microsoft NAT-PT (RFC 2766) device to provide access to IPv4-only resources for DirectAccess clients

Here’s how DirectAccess works:

A DirectAccess client computer boots and detects a network connection.
The DirectAccess client computer attempts to connect to an intranet-only web site specified in DirectAccess configuration. If the web site is available, the DirectAccess client determines that it is connected to the intranet, and the DirectAccess connection process stops. The effective DNS Name Resolution Policy revealed by the command, netsh name show effectivepolicy, should indicate DirectAccess is turned off, if the client is in the intranet. On the other hand, if the Web site is not available, the DirectAccess client determines that it is connected to the Internet and the DirectAccess connection process continues. The DirectAccess client computer connects to the DirectAccess server using IPv6 and IPsec. If a native IPv6 network isn’t available, the client establishes an IPv6-over-IPv4 tunnel using 6to4 or Teredo. If a firewall or proxy server prevents the client computer using 6to4 or Teredo from connecting to the DirectAccess server, the client automatically attempts to connect using the IP-HTTPS protocol, which uses a Secure Sockets Layer (SSL) connection to ensure connectivity as shown below.
As part of establishing the IPsec session, the DirectAccess client and server authenticate each other using computer certificates for authentication. Two types of IPsec protection: end-to-end and end-to-edge are available for a DirectAccess client to connect to intranet resources.
By validating Active Directory® group memberships, the DirectAccess server verifies that the computer is authorized to connect with DirectAccess. To mitigate the risk of denial of service (DoS) attacks, IPsec on the DirectAccess server de-prioritizes key negotiation traffic using Differentiated Services Code Points (DSCPs).
If Network Access Protection (NAP) is enabled and configured for health validation, the DirectAccess client obtains a health certificate from a Health Registration Authority (HRA), located on the Internet, prior to connecting to the DirectAccess server. The HRA forwards the DirectAccess client’s health status information to a NAP health policy server. The NAP health policy server processes the policies defined within the Network Policy Server (NPS) and determines whether the client is compliant with system health requirements. If so, the HRA obtains a health certificate for the DirectAccess client. When the DirectAccess client connects to the DirectAccess server, it submits its health certificate for authentication.
The DirectAccess server begins forwarding traffic from the DirectAccess client to the intranet resources to which the user has been granted access.

Notice the DirectAccess connection process happens automatically once a DirectAccess client boots up without requiring a user to log on.

Security Bulletins for the Regular IT Guy - Nov 09 Podcast

Rick Claus — Fri, 20 Nov 2009 01:40:00 GMT

Three guys got together over pints in Ottawa, Canada back in February 2009 and talked about how one of the issues facing Technical Professionals today is keeping their systems patched and up to date. This issue was brought up to them at a User Group meeting they were attending (Ottawa Windows Server User Group) where we were participating in an “Ask the Microsoft Guy” panel discussion.

Over pints at D’Arcy McGee’s, Pierre Roman, Bruce Cowper and Rick Claus decided to try to help solve the issue of information overload regarding patching and put together a timely podcast to go live each “Patch Tuesday”.

Goals:

Use plain English terms and everyday language that any Technical professional can understand – minimize “corporate speak”.
Breakdown each Security Bulletin with summary information first followed by more details as to the impact an IT Pro would face.
Outline mitigation factors in case patches couldn’t be tested or applied in a timely fashion
Keep it top 20 minutes OR LESS. This one is critical – Keep It Simple, repeatable and get out of the IT Pros way to get on with their day.
Have fun!

Have a listen directly from the embedded player OR subscribe to the feed and download it to your iTunes / Zune software.

As always - if you have suggestions on making it better - please pass on your comments. Mail me directly – Microsoft Security Response Center blog.

Bulletins discussed for November 10th, 2009:

Podcast Participants: Pierre Roman, Bruce Cowper and Rick Claus.

Additional Technical Show Notes:

Recorded at the local Starbucks across the street from the Ottawa offices of Microsoft Canada.
Beverage of choice for this edition: Vanilla Latté and Chai Latté
Get security essentials from www.microsoft.com/securityessentials
Microsoft Security Intelligence Report (SIR) can be found here.

PodSafe music from PodSafe Music Network @ http://music.podshow.com/. Artist: Derek K Miller, song - “You’re the Big Sky - rock guitar instrumental”

Morgan Keegan on Exchange 2010

Adam Bomb — Thu, 19 Nov 2009 08:01:00 GMT

The last stop on the Exchange customer road trip was Memphis. We met with a couple guys from Morgan Keegan.
They expect to see some significant cost savings and improved uptime. They even got written up in Wall Street and Technology - you can see the write up here.

MS Visio - jak na mapu webu?

Karel Florian (KFL) — Thu, 19 Nov 2009 03:04:00 GMT

Screencast vám ukáže, jak vytvořit mapu webu či portálu za pomoci produktu Microsoft Visio.

Autorem screencastu je Peter Belko (MVP).

Windows 7 DirectAccess User Experience

yung — Thu, 19 Nov 2009 02:50:00 GMT

This is a follow-up posting with Windows 7 DirectAccess Explained. Here, I configured a simple infrastructure with my Hyper-V-enabled laptop to demonstrate the user's experience in accessing corporate resources with DirectAccess including:

dc.contoso.com

DC/DNS/DHCP/CA

da.contoso.com

DirectAccess server with 2 network adapters and 2 consecutive Ipv4 addresses assigned to the one connected to the Internet

app.contoso.com

An internal only application server

win7-client.contoso.com

A Windows 7 machine configured as a DirectAccess client

The demonstration shows with DirectAccess a user can securely access authorized corporate resources with the same experience working remotely without connecting to a virtual private network (VPN) as one would have when working in the office.

Thrive Live! A Technical Framework for Data Governance

Evren Toktas — Wed, 18 Nov 2009 21:59:00 GMT

Organizations struggle every day with the tradeoffs resulting from the need to maximize benefits derived from IT, while preserving the confidentiality of customer and company data. Using a technical framework for data governance can help you deal with privacy and security issues and develop a road map for the implementation and execution of governance, risk, and compliance efforts. Attend this webcast to find out how you can employ your knowledge of your own organization's data flows and data privacy and security policies to identify threats to data resources, manage risk, and select technical controls to improve the privacy and security of your sensitive information.

Visit Microsoft Thrive site and find out how you Thrive - www.microsoft.com/thrive

Technical Talks with Tim Vander Kooi-Windows Server2008 R2

Evren Toktas — Wed, 18 Nov 2009 21:59:00 GMT

Join Tim Vander Kooi, chairman of the board for the North American arm of Culminis, and Kevin Watt, Product Manager as part of Windows Server team in US Subsidiary, as they delve deeper into the changes that Windows Server 2008 R2 brings to the server OS and what these changes mean with regard to existing network infrastructure. What current applications and products are affected by making the move to Windows Server 2008 R2 and also how do Windows Server 2008 R2 and Windows 7 together bring a new dimension to network computing?

Visit IT Manager Community Hub on TechNet - www.technet.com/itmanagement

SQL Server Day - Entrevista com Alexandre Lopes

Luciano Palma — Wed, 18 Nov 2009 21:25:00 GMT

No dia 7 de novembro aconteceu o SQL Server Day.
Os webcasts começaram às 9:30 e só terminaram às 23:30! 14 horas seguidas de palestras via Internet. Os alunos do ETEC de Marília participaram ao vivo, e nada menos do que 462 pessoas participaram virtualmente, durante 3 sessões que contaram, em média, com 100 pessoas conectadas simultaneamente.
Acompanhe a entrevisa com Alexandre Lopes, idealizador e organizador do evento.

Forefront TMG RTM Overview Interview

David Tesar — Wed, 18 Nov 2009 07:59:00 GMT

With the RTM of Forefront Threat Management Gateway (TMG), David Cross tells us about what's new and gives some real-world examples of how Microsoft IT has benefited from TMG over ISA 2006. He also discusses the following:

Why TMG only utilizes Microsoft signatures with the GAPA / NIS capabilities
How TMG protects non-Microsoft & unmanaged clients
URL filtering capabilities
How TMG can help you save costs
How to migrate from 32-bit ISA 2006 servers to the (only 64-bit) TMG server
The differences between UAG and TMG

Download TMG RTM
Learn more about TMG

Passo-a-passo da instalação "Zero Touch" com o SCCM 2007 (Parte 2/2)

Luciano Palma — Tue, 17 Nov 2009 20:20:00 GMT

Neste vídeo a consultora Priscila Silva explica os passos para implementar um deployment de Windows 7 utilizando o modo "Zero Touch", ou seja, de forma totalmente automatizada. Ferramentas como o MDT, AIK, WDS e SCCM 2007 são abordadas durante o vídeo.
Parte 2 de 2.

Announcing the RTW of the IIS SEO toolkit and the RC of URL Rewriter 2.0

Joey Snow — Tue, 17 Nov 2009 18:15:00 GMT

Need to make your web site’s relevance more search engine friendly as well as create simpler URLs? Today marks the RTW (Release to Web) of the IIS Search Engine Optimization (SEO) Toolkit and the RC (Release Candidate) of URL Rewriter 2.0.

The IIS SEO Toolkit helps Web developers, hosting providers, and Web server administrators to improve their Web site’s relevance in search results by recommending how to make the site content more search engine-friendly. The IIS SEO Toolkit helps to improve the volume and quality of traffic to your Web site from search engines, control how search engines access and display Web content, and inform search engines about locations that are available for indexing.

IIS URL Rewriter 2.0 adds support for outbound response rewriting and enables Web administrators to create powerful rules to implement URLs that are easier for users to remember and easier for search engines to find. IIS URL Rewriter 2.0 helps to easily define rules that match URLs or HTTP headers to generate more friendly and consistent URLs, protect content and assets from unauthorized linking and scanning, and integrate with existing IIS features to improve management, performance, and troubleshooting.

For more information or to download, please visit the IIS SEO Toolkit RTW page and the IIS URL Rewriter 2.0 RC page. Of course for all of your IIS 7.5 needs you should visit IIS.net.

IT Manager Community Chat with Kevin Remde: Windows 7—What's In It for You?

Evren Toktas — Tue, 17 Nov 2009 16:03:00 GMT

Join Kevin Remde, Sr. IT Professional Evangelist in US and Venky Chandrasekharan, Product Manager as part of Windows 7 team in US Subsidiary, as they address how the Windows 7 operating system could add more value to your organization. In this webcast, Kevin and his guests discuss the improvements in Windows 7 that can reduce the total cost of ownership by helping to increase automation, improve user productivity, and provide flexible administrative control to meet compliance requirements.

Visit the IT Manager Community Hub at TechNet - www.technet.com/itmanagement

Thrive Live! Migrating Windows XP to Windows 7 Using Windows Easy Transfer and USMT

Evren Toktas — Tue, 17 Nov 2009 13:40:00 GMT

You have been tasked with upgrading your desktops from Windows XP to Windows 7, and you know there is not a direct upgrade path. So, how are you going to do it? In this webcast, we give you the answers and tools that can make your migration from Windows XP to Windows 7 rather straightforward using a WORKGROUP. We also discuss stand-alone migrations using standard methodologies and the tools that are needed. Learn how the User State Migration Tool (USMT) in the Automated Installation Toolkit (AIK) has everything you need to get the migration going and smoothly deploy Windows 7.

Visit Microsoft Thrive site - www.microsoft.com/thrive

Thrive Live! Virtualization

Evren Toktas — Tue, 17 Nov 2009 11:04:00 GMT

Join Kevin Remde, Sr. IT Professional Evangelist and Shanen Boettcher, General Manager in the Server & Tools Division on the US team at Microsoft, as they discuss Hyper-V in Windows Server & System Center and how Microsoft Virtualization solutions can cost less and help you maximize the return on your virtualization investment. They will also address the features and benefits of Windows Server Virtualization and System Center including how they work together to allow complete integration.

Visit Microsoft Thrive site - www.microsoft.com/thrive

How Microsoft IT Used OSD as Part of the Windows 7 Deployment

Microsoft IT Showcase — Tue, 17 Nov 2009 06:37:00 GMT

Microsoft IT will talk about how they leveraged the Operating System Deployment feature within System Center Configuration Manager to deploy Windows 7 within the Enterprise. Learn how Microsoft IT customized the solution that has been engineered for extensibility and how you can do the same.

How Microsoft IT Simplified the Windows 7 Installation Experience with OSD

Microsoft IT Showcase — Tue, 17 Nov 2009 03:05:00 GMT

Microsoft IT will talk about how they simplified the Windows 7 installation experience by developing a self-service wizard. The wizard can be launched from network boot or run advertised programs in control panel. It uses preflight checks and gives the user the ability to select applications to install. Find out how Microsoft IT will enhance this offering in the future.

Exchange 2010 at Global Crossing

Adam Bomb — Mon, 16 Nov 2009 19:45:00 GMT

The second stop on the Exchange early adopter road trip was Vegas. The customer we visited with, Global Crossing, was actually just in town for a conference, but who am I to turn down a visit to Sin City?
Global Crossing is upgrading to Exchange 2010 to take advantage of the great new e-mail archiving, cheaper storage options, and as a replacement for its legacy voicemail system.
CIO Magazine also caught up with Global Crossing this week and posted this story on the cost savings the company hopes to realize by standardizing on Windows phones and EAS and moving off of BlackBerry smartphones.