THE OFFICIAL BLOG OF THE SBS "DIVA"

I hope you have made your hotel reservations.  (I have) At this point the Redmond Marriott Town Center and the Residence Inn are completely sold out.  If you have not yet made reservations I would try priceline for Bellevue and or Redmond Washington. (You can also check out Expedia.com or directly on the web sites of the hotels as I saw both had some openings last week and you might want to ask on various listserves if folks want to bunk up and share a room... start your partnership opportunities even earlier.  We're having a Girls room like in last years).

Missed the Live meeting about Windows Home Server?  It was recorded!

https://www119.livemeeting.com/cc/partners1/view?id=13847&role=attend&pw=536bee

Microsoft is pleased to confirm your registration for the following Web Seminars.

Recorded Web Seminar
Event Title: SB: Windows Home Server – Bringing it all together!

Attendance URL: http://www.msreadiness.com/attendevent.aspx?eventid=14319

**********************************************************************************

TO ATTEND THE EVENT
You will need:
- A computer with access to the Internet to view the visual portion of the event.
- A functioning sound card and speakers or headphones for your PC.
- Windows Media Player 9 (WMP 9).
- A compatible computer configuration. To test your computer:
1. Click on the following link: http://www.encounter.net/systemtest
2. Install and run Live Meeting software if prompted to do so.
3. You should see a Live Meeting console with 3 revolving slides. If you are able to see all three slides your test is successful.
4. If you are not able to see the slides or if your system is stalled, please contact Event Support.

ON EVENT DAY
1. To attend your meeting, click on the Attendance URL above or cut-and-paste it into your browser fifteen minutes prior to its start time. Your browser configuration will automatically be tested.
2. You will either automatically enter the meeting or see an "Enter Meeting" button. If prompted, enter your name and email address and select the "Enter" button.
3. Dial the teleconference number (detailed above) to attend the audio portion of your meeting.

To listen to the audio portion of the event once you log in to the Live Meeting console, you should hear the event's streaming audio. If you do not have WMP 9 installed you will be prompted to install it before the audio is available to you. If you have WMP 9 installed but you still do not hear the audio, please confirm that your PC speakers are on and that the volume is turned up. Alternatively, you may dial into the conference via the toll-free teleconference number. If you continue to experience difficulties, please contact Event Support.

EVENT SUPPORT:
Within the U.S./Canada: 1-800-315-0175
Outside U.S./Canada: 1-503-321-5600
Or you can email USPR Event Support at CustomerCare@encounter.net

Thank you and enjoy the conference!

If you have provided your phone number during registration, Microsoft may provide you a phone call reminder 1-2 hours prior to the start of any live Web seminars that you have registered for.

I've written open letters to Mr. Ballmer before, I've never done one to Mr. Ozzie.  Here's one to both:

It's about Vista.  I like it.  I really do.  But you really need to do something about Windows Genuine Advantage.  Because I see comments from SBS consultants who are being personally impacted by WGA's false positive flagging of genuine machines as degenuine and they don't want that near their business clients.  And quite frankly I don't blame them.

From a VAP/VAR who is dealing with a machine that has a WGA that won't flag as genuine.  While he hasn't lost functionality, the fact that he cannot get it fixed using reasonable measures is unreasonable

The risk of Vista is too great.  You are impacting future sales with the inability to see that the risk of WGA to your valid business customers is too great.  And all that stuff that Mr. Ozzie is working on, the Software as a Service is going to nail the coffin into Vista that much more in the business world.  We won't care what operating system we run. It's just a shell.  It doesn't matter.  The applications matter.  And Office 2007 is priced in a retail manner to outprice it from most folks if they don't buy it via OEM channels.  So the more you tighten the grip on WGA on Vista, the more we will realize that the operating system doesn't matter as much anymore, and that we'll push our vendors to provide Software as a Service. 

As someone said... you willing to roll the dice again on WGA?  Run mission critical machines with the possibility that WGA servers will be working like they should?  Can you guarantee... GUARANTEE that this will never ever happen again? 

The more I read about Vista in the various books and blogs I read, the more I'm getting excited about when I can match up the Server and the Workstations security level.  I don't get the UAC prompt and to me the folks that complain about it, it just showcases that we don't understand user rights and permissions. 

I can deFUD User Account Control. I can explain people about turning off UAC turns off IE in protected mode. I can tell people to tweak the setting if they insist that it's so annoying to them.  And, quite frankly, I'm beginning to think that humans that compute have lost all ability to deal with change.

But here's the deal.  What I can't deFUD is WGA.

Sure you can say that you will put in place policies and procedures to ensure that you are monitoring it better but you cannot reassure this consultant when he says:

"I won't tolerate a business interruption because of WGA, not for one second.  I don't intend to give it an opportunity to do so, anytime soon"

You can't guarantee that not for one second.

And neither can Nick with the current system in place.

So here's your action plan:

Ensure that there will never again be a possibility of business interruption due to Vista's WGA servers.  Ever.  And not just monitoring to ensure that you can roll back.  Flat out never a possibility.  Never a risk.  Never.

That's your goal and your mantra.  And until you ensure that Vista will not and cannot be impacted by failed WGA servers, the risk to business is too great for many to accept.

It's that simple.

Fix it.

-----

P.S. For those of you looking to write your own certified mailed letter to Mr. Steve Ballmer and Mr. Ray Ozzie, you can send those to One Microsoft Way, Redmond, WA 98052-6399 USA.  More information on contacting the Board of Directors can be found on the "Contact the Board" site.

Okay so folks know that I'm going upside down in November to Wayne's www.smbfocus.com conference....and it's a choice of flying via Qantas (where I have no frequent flyer mileage, no extra room upgrades) or United (where I can go with more leg room and hang in the Red Carpet Lounge before the flight).  Both are 747s.  Both can be booked to leave from either LAX or SFO (I'm about equal distance between each airport so it really doesn't matter).  Both leave at about 10:00 p.m one day and arrive 2 days later and both leave from Sydney on one day and arrive in the States about a 1/2 hour before they've left Sydney (which I always think is hilarious).

Now Dana makes the point that he's going to be uncomfortable extra leg room or not... but I'm tempted to stick with United because then I'll earn even more miles that can be used later.

So are they better?  Enough to lose the mileage, the extra leg room, the Red carpet lounge in LAX, or are they slipping a bit and it doesn't matter as much?

And yes I'm already planning to stage blog posts (but prob not a scripted or as well done as the Old New Thing does) so both you and I don't go into blog withdrawals. Okay I'll admit it... it's more me, there's a "observation factor" that one gets stuck on and I'm a bit wacko about having a RSS feed that has at least one post every business day... yeah... I know..weird.

http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.windowsupdate&tid=fdeab813-6957-452f-8985-a4f3d88ca17e&p=1

1. First install the newly released 'standalone' version of Windows Update
Agent 3.0, v7.0.6000.374
http://support.microsoft.com/kb/932494

2. Now (re)install this (updated) fix:
http://support.microsoft.com/kb/927891

NB: Windows Update/Automatic Updates started offering 927891 on 22 May-07.
If "Update for [Windows XP] (KB927891)" is listed in Add/Remove Programs
(make sure Show Updates box is checked), it's already installed. cf.
http://www.microsoft.com/technet/security/advisory/927891.mspx

Try these hints from PA Bear

..now mind you we're still looking for the new and improved version 7.0.6000.381 download and not sure how to get that.. so hang loose for info on that one. 

Robert Hensing's Blog : Google blogger attacks?:
http://blogs.technet.com/robert_hensing/archive/2007/08/31/google-blogger-attacks.aspx

This has been a quiet year...but has it?  My "feel" is that a lot more is going underground....

The recent Social engineering emails

Mass of spam... http://www.vladville.com/2007/08/huge-spam-ddos-like-explosion.html

Bank of India site hacked up to serve up 22 exploits... http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9033999

It sure doesn't feel quiet on the workstation side.....

http://www.thundermain.com/rss

And the download RSS feed is fixed!  (and for those of you who thought http://feeds.feedburner.com/MicrosoftDownloadCenter that link was a Microsoft link...guess again...that's Richard's RSS feed, once again proving that little guys can be more agile than big firms...

Thank you Richard for that service you do... I know that I find it invaluable!

http://www.forbes.com/technology/2007/08/30/behavior-employees-vulnerable-tech-cx_ag_0830secure.html

http://www.forbes.com/2007/08/30/behavior-employees-vulnerable-tech-cx_ag_0830secure_slide_2.html?thisSpeed=25000

Raise of hands...or mouse clicks...

Have you ....

• borrowed wifi
• Used USB drives
• Forwarded email to a web mail account
• Opened email attachments
• Clicked hyperlinks in emails
• surfed on shady sites
• Not secured wireless devices

It's hard to come in behind someone isn't it?  But there are so many things wrong with this setup it's not funny.  About the only two things I'm not freaking out over is the fact that it has Windows 2003 sp2 and only one nic.  But that "job to kill the license server service"...that's just so wrong in so many ways it's not funny.

This firm that set this up should be ashamed of themselves.  There's no excuse in this day and age not to set up a SBS box right.  There's a community out here willing to help.  There's documentation up the wazoo.  There are books. 

And if a consultant STILL cannot set up a SBS box as it is intended to be set up, then they don't deserve to be in the IT business.

Yes that's a harsh comment.  But this customer deserves better than this. 

Microsoft is in a tough spot.  Come down hard on partners that are screwing up like this and someone somewhere will complain about anti-competitive practices and "favoring Gold partners" or something.... but customers deserve better than this.  That's for sure.

Oh yeah..what would I do?

Flatten it and reinstall.  There's just too many unknowns and possible more screw ups.

In a day of ironies... Windows XP sp3 is announced....

Windows Vista SP1 and Windows XP SP3 Announcement - SBSfaq.com Blog Site:
http://blog.sbsfaq.com/Lists/Posts/Post.aspx?ID=6

on the very same day Autopatcher's site is told to close up shop. http://www.autopatcher.com/134

Patching isn't easy.  And while I will take Rory to task a little bit more not setting his AU settings to "download but not install" to solve his reboot issue but it points out that Microsoft hasn't made patching easy.  From WGA that screws up, to XP sp3 now being next year... to Aussies who have to pay by the bit.... can Rory just promise me that after putting some clothes back on that he goes and marches that post he did up to the upper brass to get them to understand that patching ...on dial up.. on standalone... in Australia .... when you just want your computer to work.....isn't easy?  There are times I think that people from Apple or Redhat have inflitrated the management levels at Microsoft and are behind the scenes making decisions that .....well just seem stupid.

Once upon a time there was a beta that I was on for a roll up cdrom to help build systems with the latest security patches for smaller shops.  WSUS isn't for everyone.  My guess is all that Department of Justice stuff means that they want to keep offline patches on their servers in case they need to take patent-breaking bits off of them.  But as a result, it means that it's horrendous to be building slip media these days if you aren't a big shop.  I'm a genuine customer.  Help me to build secure workstations without hours of downloads and reboots will ya?

Microsoft ... we need an offline patching solution.  And if you aren't going to do one... and if XP sp3 is now out next year... how about you knock it off the legal threats on autopatcher until XP sp3 comes out will ya?  Autopatcher is just doing your job for you.  Build a new machine and we're up to what is it....about 80 or 90 patches to install post SP2 build?

You may be unable to apply more updates at a certain point on a Windows Server 2003-based computer:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;925931

Isn't that a concern as well on a XP sp2 machine?

We're building secure systems for you.

Help us.

Problem: 

GFI Webmonitor for ISA v3.0 to v4.0 Upgrade may cause very slow internet access for users - SBSfaq.com Blog Site:
http://blog.sbsfaq.com/Lists/Posts/Post.aspx?ID=4

Possible solution:

GFI Webmonitor 4 released - not without problems - Nick Whittome - "The Naked MVP":
http://msmvps.com/blogs/thenakedmvp/archive/2007/08/29/gfi-webmonitor-4-released-not-without-problems.aspx

Windows Server Division WebLog : Windows Server 2008 Timing Update:
http://blogs.technet.com/windowsserver/archive/2007/08/29/windows-server-2008-timing-update.aspx

http://blogs.zdnet.com/microsoft/?p=683&tag=nl.e589

<opinion>

And I just have to comment on that blog post.... this MVP heard about the new RTM date on blogs (including Mary Jo's) and I hope that some MVP didn't take possible private communication and release it to a journalist.  It's good that Microsoft is open, but whenever it appears that people who are under a nda possibly forwarded information and possibly without approval, (yeah I know that's a lot of possibles that I just wrote) it's a concern to me that people aren't respectful of the trust they are getting.  I see in this web 2.0 blogger world a loss of ethics and morals and I hope her comment is based upon official information she got from a PR agency...not from a forwarded note that some MVP got.

Is it any wonder that Apple keeps lids on their communication?  Is the announcement a biggie?  No.  Actually I expected this.  But her comment just brings up my concern for the loss of respect for ndas these days.  Word is Vista sp1 is on bittorrent.  When people that do the right thing get this... and people that cheat get this it's a sad commentary on our society, isn't it?

 http://support.microsoft.com/default.aspx?scid=kb;en-us;933360

Yes that's another time change patch for workstations and servers that just hit WSUS tonight. 

http://support.microsoft.com/kb/894199

Tuesday, August 28, 2007

New non-security content

The fun thing lately with Vista is that you can pretty much count on not just one Patch Tuesday a month...but two.  The last Tuesday of the month is another "patch release" time frame if you having figured that out by now.

One way to keep an eye on what's coming is watch either the latest stuff from the download page:  http://www.microsoft.com/downloads/results.aspx?freetext=&productID=&categoryId=&period=&sortCriteria=date&nr=50&DisplayLang=en or Sandi's blog... http://msmvps.com/blogs/spywaresucks/Default.aspx 

Some of these "Second patch Tuesday" patches are not MUing or WSUSing down but you may want to grab a few nonetheless. I spoke too soon...most of these are MU or WSUSing down.

http://support.microsoft.com/kb/894199

http://www.msreadiness.com/CourseDetail.aspx?id=6601
8/30/2007 9:00 AM PDT

*Enable customers to bring their digital home together with Microsoft Windows Home Server! *

**
Introducing Windows Home Server, a new way to simplify how your customers will keep and share family photos, videos, and music with anyone they wish, anywhere in the world.

This smart “hub of the house” lives in the home (maybe in a closet) and connects all the important people in your customers life via a scalable solution to their digital content that's on their computers. Your customers can stream their tunes to their Xbox 360, share pictures over the Web, and even get on their Home Server when they are on the road! Your customers friends and family can see and share any files *specified *through an easy to use interface, whether they're in another room or another country.

Your customers memories stay safer, too, with daily automatic backups that help recover lost documents (or rescue computers that have had “unfortunate” accidents). Adding space to the server is also easy. Scalable storage via adding HDD”s or USB storage is easy and efficient. Windows Home Server will keep growing and getting better with your customers!

In our discussion we will talk about the features, selling points, forum factors, configuration, and many other fun and exciting details about the new Home Server Software from Microsoft. Come join!

Today's SBS blog post courtesy of Mark Stanfill 

The Official SBS Blog : SBS Technical Library Has a New Home.:
http://blogs.technet.com/sbs/archive/2007/08/28/sbs-technical-library-has-a-new-home.aspx

Download details: Update for Windows Vista (KB941090):
http://www.microsoft.com/downloads/details.aspx?FamilyID=09f002d9-a140-42a8-99f5-a86f2b7e39f1&DisplayLang=en

Install this update to resolve an issue where messages become stuck in the Outbox and cannot be deleted when using Windows Mail. After you install this item, you may have to restart your computer.

Being WGA gated.. I think I'll download that on an XP machine.

Download details: Group Policy Diagnostic Best Practice Analyzer for Windows Server 2003 (KB940122):
http://www.microsoft.com/downloads/details.aspx?FamilyID=47f11b02-8ee4-450b-bf13-880b91ba4566&DisplayLang=en

The Microsoft Group Policy Diagnostic Best Practice Analyzer (GPDBPA) for Windows XP and Windows Server 2003 is designed to help you identify Group Policy configuration errors or other dependency failures that may prevent settings or features from functioning as expected.

Haven't tried it on a SBS box yet but that looks interesting...

Microsoft Watch - Business Applications - Will Microsoft's Katrina Goodwill Go Bad?:
http://www.microsoft-watch.com/content/business_applications/will_microsofts_katrina_goodwill_go_bad.html?kc=MWRSS02129TX1K0000535

Joe.. I'm a small business.  I buy SBS 2003 on open value so that the payments can be spread over three years.  I'm not alone.  You know what else is available if I'd want it?  Microsoft financing.

Microsoft Partner Readiness:
http://www.msreadiness.com/CourseDetail.aspx?id=496

I'm not sure this is too little too late... I was listening this morning to NPR and there's still places that don't have telephone service back.  I mean how can you run a business without some of these basic infrastructure items in place?

Newsflash for ya Joe.  Most partners that service small businesses are small businesses themselves.  How big of "partners" do you think these people are?

Is there an element of PR?  I haven't met one of these offers yet that doesn't have a bit of PR.  But I think there's more here than meets the eye.  Businesses ... middle class... professionals need to come back to the area.  Small Businesses make up the foundation for that middle class. 

http://www.usatoday.com/money/economy/housing/2007-07-24-katrina-real-estate_N.htm

I think there's a lot of business rebuilding left to do....

I dare ya.

Explain to a non techy the concepts of WGA, Validation, KMS, MAK keys. 

I'll wait while you think about it.......

Read David Scrag's Office 2007 licensing post while you think about how you'd explain to someone the concept of Validation and WGA.

Okay now that you think about how you'd explain the concept of validation, WGA, having certain patches only behind behind WGA gated downloads....throw in a dash of this weekend and what do you get?

Windows Genuine Advantage : Update on Validation Issues:
http://blogs.msdn.com/wga/archive/2007/08/27/update-on-validation-issues.aspx

This isn't FUD anymore about WGA causing issues to folks when merely going to a web page to download an optional patch that asked for validation would throw a machine into a state where it would indicate the system was non genuine.   And the discussion is great for the "alternative OS to Microsoft" folks, because it plays right into the arguments against WGA.  That it can someday brand you as non genuine and take away a working system.  The desktop message wasn't just that the validation failed.  The desktop message said that I was not genuine and suggested ways I could get genuine.

To quote someone else... 'Bah, to paraphrase some dead geezer: a server failure on your part should not constitute an emergency on my part.'

I understand the issues on piracy. I understand that as a business Microsoft needs to protect their intellectual property.  But when it's easier for the pirates to get software, and you have innocent people just trying to use a computer that get caught in your server problem, there's a problem.

Adding a stick of ram shouldn't kick a problem, but apparently it does.

Read this thread....David said it best....

I realize Microsoft wants to protects it assets, and it should have the freedom to do it, but WGA goes way over the edge. There is a valid reason why Mac OS, Unix, Linux, and other OS's dont have something like WGA.

I like Vista.  I like it's security.  I like the additional group policy features it brings to the table.  UAC doesn't annoy me.  But customers aren't buying "Software as a service" when they buy Vista.  Things should just work without impact from a Microsoft server problem.  Most of the time in computing there's a FUD element to the arguments.  Someone spins something out of context.  Someone overreacts.  WGA is hurting Vista's reputation here.  Now one could argue that if someone is that concerned about activation that maybe they might be bending the rules and borrowing software from someone else.  But this isn't about activation, but the continued checking that the person is legal.  And is that really needed?  Isn't once enough?

One can't say that WGA in Vista can't screw up.  It did.  One can't say that it won't happen again.  I'm not in charge of the servers, are you?  All I know is right now it seems to me a bit draconian is all and needs to loosen back up to more of an XP status.