IT Pro Secure Corporation – Mr. Lynn Lunik, Chief Security Architect

Windows Deployment Services Step-by-Step Guide

lynn lunik — Wed, 17 Dec 2008 12:53:00 GMT

The Windows Deployment Services team has offered a Step by Step Guide to deploying WDS in March 2008. The author, Trina Gorman and editor, Katie Cumming offer good insight into a simple WDS deployment. I point out this Guide at this late date as I have observed a number of Clients who currently use Windows 2003 Remote Installation Services (RIS) images attempting to understand the 'next generation' of imaging for Windows 2008 from Microsoft.

This Guide is specifically for Windows 2008 image deployment and is the fundemental understanding for integrating Windows PE, bare metal imaging and WIM File configuration. Previously, in a separte Blog entry I offered the link to the Windows Automation Installation Kit (Windows AIK). The 'ultimate resource' for creating Windows 2008 and Windows Vista images.

Windows Deployment Services Step-by-Step Guide

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Updated 12-2008: Required Reference Materials for the Exchange 2007 System Engineer

lynn lunik — Wed, 10 Dec 2008 10:03:00 GMT

In August 2007 I posted a Blog entry detailing some of the necessary reference books for the Exchange 2007 System Engineer. Since that time, and after reading 100s of Microsoft TechNet Articles combined with chapters from various Authors I am offering an update to the list of required reference materials. In addition to the books referenced in the prior Blog entry, here's my current favorites:

Exchange 2007 Powershell Administration Reference Materials

Exchange 2007 Exam Preparation Reference Materials

Some insights into each of these books:

Microsoft Exchange Server 2007 - Tony Redmond's Guide to Successful Implementation (Tony Redmond) - by far the best book on the market for experienced Exchange System Engineers. Tony covers everything from API changes from Exchange 2003 to Exchange 2007 to Exchange 2007 Powershell Commandlets useful for the large enterprise Administrator. If you are working with Clients to transition them (or migrate them) from Exchange 2003 (or other SMTP systems) this is a definitive guide. The author includes numerous valueable insights into many of the new capabilities in Exchange 2007 and the shortest route to making them available to end users. Additionally, many of the professional insights gained by the author in working with prior versions of Exchange are evident by examples of how the Exchange 2007 Development Team has improved, modified or eliminate specific functions. I repeat, this is one of the best resources available for experienced Exchange System Engineers.

Windows Powershell for Exchange Server 2007 SP1 (Joezer Cookey-Gam, Brendan Keane, Jeffrey Rosen, Jonathan Runyan and Joel Stidley) - this is the new standard for Exchange Powershell reference books. The authors cover everything from using setup parameters for unattended installs to very detailed use of the Powershell 1.0 Environment for Administration, Configuration, Reporting and Documentation. An excellent resource for System Administrators considering Powershell Scripting. The authors (several from Microsoft Consulting Services) include detail specific to Exchange Powershell Commandlets focused exclusively on Exchange Server 2007 SP1. I particularly appreciate the clarity with which the authors use Pipelining of Exchange Powershell Commandlets in examples. Each example provides useful insights into Administering from a Command Line Interface (CLI).

MCTS Self-Paced Training Kit (Exam 70-236): Configuring Microsoft Exchange Server 2007 (Ian McLean, Orin Thomas) - the material in this book focuses on many of the tasks associated with transitioning from Exchange 2003 to Exchange 2007. These tasks range from User Administration to proper Connector configuration for coexistence. The Authors provide useful Exchange Powershell Commandlets continually for reference. Additionally, you will find detailed instructions on how to use tools like Message Tracking and Queue Viewer, along with Monitoring an Exchange 2007 Enironment using the output from Microsoft Operations Manager 2005 and Microsoft System Center Operations Manager 2007. The authors provide 'real world' experiences throughout the book and offer valid examples easily referenced in many Production environments.

MCTS Self-Paced Training Kit (Exam 70-237): Designing Messaging Solutions with Microsoft Exchange Server 2007 (Paul Mancuso, David Miller and Sam Sena) - the material in this book focuses on Backup and Recovery, High Availability and Messaging Records Management. If you are looking for reference materials regarding Transport, messaging classification and establishing compliance standards this book provides that detail. Additionally, if you are establishing procedures for Disaster Recovery for Exchange Server 2007, you definately need this book in your library. The detailed materials focused on Backup methodology, using Recovery Storage Groups and proper input into edbutil from a command line makes this a useful reference.

MCTS Self-Paced Training Kit (Exam 70-238): Deploying Messaging Solutions with Microsoft Exchange Server 2007 (Nelson Reust and Danielle Ruest) - the material in this kit is quite thorough and covers the considerations for deploying Exchange 2007 whereby the starting point may be from various perspectives. Specifically, if you are considering transitioning to Exchange 2007 and need to understand the requirements for server installation, the Exchange 2007 server roles, how your Active Directory environment will be effected or the effects of interoperability with existing mail-enabled applications. Additionally, I found the Chapter on Transport Rules and Compliance some of the best reference material I found on filtering messages in Transport Rules for character patterns (Customer Information for example). This kit is required reading as it includes numerous charts, checklists and detailed technical requirements for successful deployments of Exchange Server 2007 SP1.

Finally I would state each of these books has a place in a well-rounded (not literally, of course!) Exchange System Engineers library. I would not recommend taking on a large Exchange 2007 SP1 deployment without any of them!

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

SC Operations Manager 2007 SP1 - Validating the SPN Entries for Root Management Server and the SDK and Config User ID

lynn lunik — Mon, 01 Dec 2008 00:53:00 GMT

This Blog entry defines the SPN values for a Root Management Server and the SDK and Config User ID for a single server SCOM2k7 SP1 Server installation. If you have ever wondered what the default SPN values were for a Root Management Server in SCOM2k7 SP1 - here is your reference! ...(read more)

SC Operations Manager 2007 SP1 - SQL Server Management Pack 11-2008

lynn lunik — Mon, 01 Dec 2008 00:03:00 GMT

The SC Operations Manager Team has updated the SQL Management Pack to include SQL 2008. Additionally, this new MP includes a number of new or improved views and monitoring capabilities for both SQL2k5 and SQL2k8. Here's the bulleted list from the download page:

Support for Enterprise, Standard and Express editions of SQL Server 2000, 2005 and 2008 and 32bit, 64bit and ia64 architectures.

Support for both simple and complex SQL configurations such as clustered installations, multiple instances and 32bit roles running on a 64bit OS. For full details on supported configurations refer to the guide included with the management pack.

Discovery and monitoring of SQL Server roles such as DB Engine, Reporting Services, Analysis Services, Integrations Services.

Discovery of SQL components such as databases, the SQL Agent and SQL jobs.

Over 20 views covering areas such as database free space, SQL related performance, SQL related alerts, and lists of the various SQL roles and components which are discovered and their related state.

Reports for longer-term analysis of common problem areas related to SQL Server such as SQL Server lock analysis and top deadlocked databases, SQL Server service pack levels across discovered roles, user connection activity. Likewise the generic reports from the Microsoft Generic Report Library can be used against the roles and components discovered by the SQL MPs to review availability and performance across many systems and over longer periods of time.

Role and component specific tasks which provide access to common tools, triage information, or corrective actions without needing to leave the Operations Console in most cases.

Monitoring of databases covers database status, database free space, log shipping monitoring for both the source and destination, and transaction log free space.

Monitoring of key SQL related services.

Monitoring for persistent SPID blocking.

Monitoring of numerous SQL events and performance data points. Alerts bring the issue to your attention and provide knowledge on the impact and possible resolutions.

Initial client and Lab testing indicates this MP is in good shape.

SQL 2005/SQL 2008 Management Pack - 11-2008

Here's a Screen Capture of the Views available from the SCOM2k7 Main Console for this Management Pack.

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Update Rollup 5 for Exchange Server 2007 SP1 (KB941421)

lynn lunik — Sun, 30 Nov 2008 23:50:00 GMT

The Exchange Team has offered a current Update Rollup for Ex2k7 SP1. This Update Rollup addresses a challenge encountered by Ex2k7 Servers that cannot directly access the Internet by a routed path.

You can read more details about the Update Rollup at the download location.

Update Rollup 5 for Exchange Server 2007 SP1 (KB941421)

Lynn Lunik
Independent Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

SC Operations Manager 2007 SP1 - Configuration Steps: SCOM2k7 Basic Event Monitor with a Manual Alert Reset

lynn lunik — Tue, 21 Oct 2008 13:41:00 GMT

This Blog entry offers detailed step-by-step instructions on how to create a Basic Event Monitor in SCOM2k7....(read more)

Group Policy Reference Material Updates for Windows Server 2008 and Windows Vista

lynn lunik — Tue, 30 Sep 2008 05:42:00 GMT

There are a number of update documents and tools for Group Policy suited for Windows 2008 and Windows Vista. Here is a compiled listing for configuring Group Policy settings for these (and prior versions) of the Windows Operating System.

Templates

Administrative Templates for Windows Server 2008 (admx files)

Windows Vista Starter Group Policy Objects

Tools

Remote Server Administration Tool - Windows Vista 64-Bit

Remote Server Administration Tool - Windows Vista 32-Bit

Documentation

Windows Vista Security Guide

A Guide to Group Policy Preferences for Users of PolicyMaker Standard Edition

Group Policy Preferences Overview

Group Policy Settings Reference for Windows Server 2008 and Windows Vista SP1

Information about new Group Policy preferences in Windows Server 2008 - KB 943729

Group Policy Documentation Survival Guide

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Exchange Server 2007 Design and Architecture at Microsoft

lynn lunik — Mon, 22 Sep 2008 12:17:00 GMT

A consistent theme with Large Clients entails discussions of 'How did Microsoft do their Exchange 2007 Transition?' or, 'How does Microsoft configure Spam Filtering', and even, 'How much capacity do I need for 'XYZ' Exchange 2007 Service?'. With these questions I utilize some of the quality reference materials as the resources to find the answers. Microsoft (and the Microsoft Exchange Technical Writing Team along with the Microsoft Operations Technology Group) have...(read more)

SC Operations Manager 2007 SP1 - Configuration Steps: SCOM2k7 Basic Service Monitor with a Diagnostic and a Recovery for a Stopped Service

lynn lunik — Mon, 15 Sep 2008 11:50:00 GMT

This Blog entry provides an example of how to create a Basic Service Monitor as a Simple Unit Monitor in System Center Operations Manager 2007 (SCOM2k7). In addition, I add a single Diagnostic to output the Tasks running when the Service stops and a Recovery to restart the stopped Service. If you are trying to determine how to have SCOM2k7 restart a stopped Service automatically, review this Blog entry....(read more)

Virtual PC 2007 SP1 Availability

lynn lunik — Sun, 14 Sep 2008 18:58:00 GMT

In May 2008 Microsoft made available the download for Virtual PC 2007 SP1. I still have several workstations in the ITPS Lab that use Virtual PC 2007 so I will make the move to update these machines to the latest Virtual PC 2007 codebase.

The 'buzz' with Windows 2008 and Hyper-V have been so great (and consumed so much of my time learning) in the virtualization space that I missed the Virtual PC 2007 SP1 update!

It is important to note the download is available in both 32-bit and 64-bit versions and supports specific Windows Vista versions!

Virtual PC 2007 SP1 Download

You will find a technical overview of Virtual PC 2007 SP1 here and the associated XPS Viewer here!

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Reviewing the Basics of the Hyper-V Administrative Interface

lynn lunik — Wed, 10 Sep 2008 22:28:00 GMT

Microsoft Hyper-V offers a variety of useful capabilities when virtualizing servers and associated applications in a data center environment. If you are seeing the Hyper-V Administrative interface for the first time its important to keep in mind the more time spent using the interface the less challenging the various settings become (like many things in our lives!). Let's take a look at the Hyper-V MMC (Microsoft Management Console) without focusing on Windows 2008 Server installation, Hyper-V installation, Network Interface Card (NIC) configuration, or any of the other steps required to adminstrate a server using Hyper-V. We'll simply dig into Hyper-V, then in other Blog entries follow steps for setup, configuration, etc. of Hyper-V. If you have ever wondered what the Hyper-V GUI entails here is your entry!

The following screen captures are divided into sections based on the interface.

Hyper-V Settings
Virtual Network Manager Settings
Individual Guest Server Settings

Hyper-V Settings

Hyper-V Manager Settings

The essentials are available from the 'New' Task option. Here we can create Virtual Machines, Virtual Hard Disks and Virtual Floppies.

The fundementals of Hyper-V file placement is configured from the 'Hyper-V Settings' Task in the Hyper-V MMC. In this example local drives are available. Network and SAN Drives (Volumes) are equally viable.

1. Hyper-V Settings

2. Hyper-V Settings

3. Hyper-V Settings

4. Hyper-V Settings

5. Hyper-V Settings

6. Hyper-V Settings

7. Hyper-V Settings

Virtual Network Manager Settings

1. Virtual Network Manager Settings

2. Virtual Network Manager Settings

3. Virtual Network Manager Settings

4. Virtual Network Manager Settings

5. Virtual Network Manager Settings

Individual Guest Server Settings

1. Individual Guest Server Settings

2. Individual Guest Server Settings

3. Individual Guest Server Settings

4. Individual Guest Server Settings

5. Individual Guest Server Settings

6. Individual Guest Server Settings

7. Individual Guest Server Settings

8. Individual Guest Server Settings

9. Individual Guest Server Settings

10. Individual Guest Server Settings

11. Individual Guest Server Settings

12. Individual Guest Server Settings

13. Individual Guest Server Settings

14. Individual Guest Server Settings

15. Individual Guest Server Settings

The purpose of this Blog entry is to introduce the numerouse configuration tasks and options for Hyper-V. Subsequent Blog entries will then reference these settings relative to each respective configuration goal. Take some time to study these as each of them offer the ability to setup Virtualized Guest Servers hosting various applications.

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Configuration Steps: Using the 'netstat' Command to determine if a Port is Open in Windows 2008 or Windows Vista

lynn lunik — Mon, 08 Sep 2008 16:52:00 GMT

The 'netstat' command has been around for many years and on multiple Operating Systems. We will briefly review 3 netstat parameters useful on both Windows 2008 and Windows Vista. If you have ever been asked the question by a colleague, 'How do I tell if RDP is listening on Port TCP 3389 for Server XYZ'? I will show you an example of how to use the netstat command to see if a server is listening on a specific port using the find parameter.

Here are our 3 commands for this example:

'netstat' - indicates 1) Protocol, 2) Local Address, 3) Foreign Address, and 4) State (of Connection).
'netstat -aon' - indicates 1) Protocol, 2) Local Address, 3) Foreign Address, 4) State and 5) Process ID (PID).
'netstat -an | find ":3389' - indicates any Local IP Address listening on TCP 3389 (default Protocol and Port for Remote Desktop (RDP))

Here are our 3 commands in action in a Windows Vista SP1 Command Window (if you like how clear this Windows appears take a look at my Blog Entry titled '

Command 1 - 'netstat' - offers us a clear picture by protocol as to Local Ports open and to which Foreign Address (remote host).

Command 2 - 'netstat - aon' - provides similar detail with the addition of IPV6 information and specific Process IDs (PIDs).

Command 3 - 'netstat -an | find ":3389' - provides affirmation by IP Address of servers maintaining an open connection on TCP 3389.

Enjoy using this much overlook utility found in both Windows 2008 and Windows Vista!

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

ISA Server 2006 Operations Guide

lynn lunik — Mon, 08 Sep 2008 09:49:00 GMT

While reviewing other Technical Blogs this morning I came across an entry by Dr. Thomas Shinder who identified the online version of the ISA Operations Guide. It turns out I was researching a 'general purpose' operations guide for several clients focused on ISA 2006 EE, so the timing was terrific! Although this Operations Guide is fairly general in its content, I would (and am) recommending it as an operational reference. A quick read of this Guide denotes some of the 'Daily, Weekly and Monthly' operational procedures required to support ISA 2006 EE in production. Again, a worthwhile reference for the many ISA 2006 EE installations in data centers across the globe.

ISA Server 2006 Operations Guide

You can find a full version in Microsoft Virtual Hard Disk (VHD) format of ISA 2006 at the following link:

ISA Server 2006 Virtual Hard Disk

One important resource I would callout to your attention that many IT Professionals overlook, is the Microsoft Technet Events and Error Message Center. This online resource allow lookup, by product and event id the various event ids associated with configuring Microsoft Products.

Microsoft TechNet Events and Error Message Center

Here's a sample image of the Microsoft TechNet Errors and Event Web Site.

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Working with Powershell and a Command Prompt using the Consolas Font Pack

lynn lunik — Sun, 07 Sep 2008 02:47:00 GMT

I have found the more time invested in Powershell for Exchange 2007 and Operations Manager 2007 Administration the more the reality of using a Command Windows that is viewable. I have invested in good quality Monitors and find myself sitting closer to the Monitor based solely on the Application in use. A number of months back (I know, I know, many months back) Bill Hill, Program Manager for the Internet Explorer Team posted a good article on why using the new Microsoft Consolas Font Pack is a good thing. After working with the Consolas Font Pack install on every Lab and Client Server available I have to admit it makes a big difference when prolonged reading of a Command Windows is necessary.

The big differences is using a mono-spaced font in a Command Window and how Cleartype renders that font. Don't take my word for it though, give it a try. There are just a couple of steps involved in configuration. Here they are:

Download and Install the Consolas Font Pack using the .MSI File Format.
Add the following Registry Key
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Console\TrueTypeFont" /v 00 /d Consolas
Logoff the Server or Workstation (my experience is a Reboot may be required for 'older' Operating Systems (WinXP).
Open a Command Window, Right Mouse Click then select 'Properties' of the Windows, then navigate to the 'Font' Tab, then select Consolas (if you don't see Consolas as a selectable Font the Registry Key was not written correctly).
Select a Size of 20 or higher.
Select the 'Colors' Tab and then the 'Screen Text' modal button, then select 'White' (for example).

Save the Settings then launch a new Command Window. You should see a much clearer font in a larger format onscreen. One of the added benefits of this Font Family is it can be used in any Command Window. So, the more 'Powershell-ing' you do the more you will want this clarity!

Lynn Lunik
Independent Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Microsoft TechNet Sysinternals Online Toolset

lynn lunik — Mon, 02 Jun 2008 17:03:00 GMT

A recent article from TechTarget by Christina Torode outlined details about the new online access to the Sysinternals Toolset titled 'Sysinternals Live'. You can take a look at the following for details - but for those of us who have been/are fans of the Microsoft TechNet Sysinternals Tools - this sight is for you! The idea is to provide full web-based access to the Sysinternals Toolset without unzipping files, etc.

TechTarget Article on Microsoft Sysinternals Live

Sysinternals Live Web Site

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Update Rollup 2 for Exchange Server 2007 Service Pack 1 (KB948016)

lynn lunik — Fri, 30 May 2008 09:52:00 GMT

The most current (through 5-8-2008) version of the Update Rollup for Ex2k7 SP1 is now UPDATE ROLLUP 2.

Ex2k7 SP1 Update Rollup 2 now supercedes all prior Ex2k7 SP1 Rollups. If you are using Ex2k7 (referred to as Ex2k7 RTM) this Rollup IS NOT FOR YOU! You should first advance to Ex2k7 SP1 then apply the Ex2k7 SP1 Rollup 2 below.

Update Rollup 2 for Exchange Server 2007 Service Pack 1 (KB948016)

Technorati Tags: Exchange 2007

Flickr Tags: Exchange 2007

del.icio.us Tags: Exchange 2007

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

SC Operations Manager 2007 SP1 - SCOM2k7 SP1 SCW Roles and the Security Hardening Guide for Win2k3 Server

lynn lunik — Fri, 30 May 2008 09:11:00 GMT

Along with the many 'usability improvements' in SCOM2k7 SP1 we are beginning to see additional signs of an Operational Management Product that is maturing in the marketplace, both in acceptance and in useful capabilities. Release of the Security Configuration Wizard (SCW) Role Specific Templates for SCOM2k7 SP1 indicates the significant attempt to optimize and secure SCOM2k7 SP1 Deployments is underway.

In addition, release of the Security Hardening Guide for SCOM2k7 SP1 for Windows 2003 provides 'some' insights for incorporating the functions made available in the SCOM2k7 SP1 Templates for the SCW. I would not recommend using the SCOM2k7 SP1 SCW Templates without a 1) thorough understanding of the Security Configuration Wizard, then, 2) experience with SCOM2k7 SP1! Perhaps in a future release of the Security Hardening Guide for SCOM2k7 SP1 additional insights and beneficial detailed examples will be made available for reference.

SCOM2k7 SP1 Security Configuration Wizard Templates and the Security Hardening Guide for Windows Server 2003

Additionally, for your reference, I have blogged about the following in previous entries:

Windows 2003 SP1 Security Configuration Wizard Documentation

Using the Security Configuration Wizard to Secure Windows for Exchange Server Roles

Enabling the Security Configuration Wizard for Exchange 2007 Server Roles using the Exchange 2007 SCW Extension Files

SC Operations Manager 2007 Service Pack 1

Technorati Tags: SC Operations Manager 2007

del.icio.us Tags: SC Operations Manager 2007

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

ISA 2006 Enterprise and Standard Edition Service Pack 1 Details

lynn lunik — Mon, 26 May 2008 15:57:00 GMT

Jim Harrison of the ISA Sustained Engineering Team (now Forefront Edge) has offered some interesting details of ISA 2006 Service Pack 1 (ISA2k6 SP1). You can read these details in the ISA Team Blog.

For those of you who Publish Exchange 2007 through ISA2k6 EE you will find a number of these 'improvements' very useful. Such as:

Querying Diagnostic Logging
A Highly Configurable Traffic Simulator
Filtering and Searching Configuration Changes (or Change Tracking)

Technorati Tags: ISA Server 2006

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Virtual Machine Remote Control Client Plus - V1.7

lynn lunik — Mon, 28 Apr 2008 18:12:00 GMT

The VMRCC Plus has been revved to V1.7. This useful interface for managing Windows Virtual Guests is made available from the Microsoft Download Web Site.

Virtual Machine Remote Control Client Plus V.1.7

Matthijs ten Seldam Blog Site

I previously Blogged about V1.6 here for your reference!

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

SC Operations Manager 2007 Service Pack 1

lynn lunik — Wed, 23 Apr 2008 07:54:00 GMT

In February 2008 the Operations Manager Team RTMed SCOM2k7 SP1. I will Blog separate configuration examples in future entries. Until that time here are the Reference Materials for SCOM2k7 SP1.

SC Operations Manager 2007 Service Pack 1

SC Operations Manager 2007 Management Pack Catalog

SC Operations Manager 2007 Service Pack 1 Documentation

SC Operations Manager 2007 Service Pack 1 Training Videos

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Automated Installation Kit for Windows Vista SP1 and Windows 2008

lynn lunik — Wed, 23 Apr 2008 07:42:00 GMT

An updated .ISO Image for the Automated Installation Kit for Windows Vista SP1 and Windows 2008 is now available from the Microsoft Download Web Site.

The Automated Installation Kit for Windows Vista SP1 and Windows 2008 (or simply AIK for short) provides the Reference Materials and Tools to automate deployment of both Operating Systems referenced in its title.

Automated Installation Kit for Windows Vista SP1 and Windows 2008

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Security Audit Events for Windows 2008 and Windows Vista

lynn lunik — Sat, 19 Apr 2008 09:39:00 GMT

I field numerous questions from Clients regarding Security Audit Event values when configuring Security Settings and SC Operations Manager 2007 Monitors and Rules. Finally, a single Worksheet has been generated by Microsoft which begins to document Security Audit Events instead of referencing 3 or 5 'Security Guides' that partially reference specific Audit Event values.

Several observations regarding this Security Audit Event Worksheet are appealing. Specifically, the ability to use the Excel Worksheet 'Data Filter' capability to isolate a single Event ID by Number. Also, when writing detailing SCOM2k7 Monitors we can focus on generating a legible Event Description detail. If you have not seen the complete listing of Windows 2008 Materials from Microsoft Press you will find a searchable list here.

Security Audit Events for Windows 2008 and Windows Vista

The Security Audit Event Worksheet displays Events by Category, Sub-Category, Event ID, Message Summary and Minimum Operating System.

The 'Complete Event Message' Tab details reference detail useful when generating SCOM2k7 Monitors.

Lynn Lunik
Independent Security Consultant"
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Protecting Exchange 2007 with Data Protection Manager 2007

lynn lunik — Fri, 21 Mar 2008 10:30:00 GMT

Doug Gowans from the Microsoft Premier Support Team in Dubai has posted a detailed article summarizing how DPM2k7 functions in relation to Exchange 2007. What I find of value in this Blog Post is the summarization of how DPM2k7 incorporates Volume Shadow Copy (the VSS Writer) function into its inherent Backup function.

Protecting Exchange 2007 with Data Protection Manager 2007 - Exchange Team Blog

Technorati Tags: Exchange 2007,SC Data Protection Manager 2007

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Useful Transition and Migration Tools - Exchange Best Practice Analyzer and Active Directory Topology Diagrammer

lynn lunik — Tue, 26 Feb 2008 16:54:00 GMT

There are many variables to consider when you Transition or Migrate from a specific Messaging System to Microsoft Exchange Server 2007. There are numerous Blog entries on this Web Site focused on making the Transition from Exchange 2003 to Exchange 2007. Additionally, there are resources for migrating from Lotus Domino to Exchange 2007 as well. If you currently offer Exchange 2003 Messaging Services the Exchange Best Practice Analyzer will identify very granular details relative to your current environment. Additionally, there is a Report titled 'Exchange 2007 Preparedness' that identifies critical criteria necessary to Transition from Exchange 2003 to Exchange 2007. Take a look at these 2 useful Tools. They are worth the effort!

Exchange Best Practice Analyzer

Active Directory Topology Diagrammer

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Update Rollup 6 for Exchange Server 2007

lynn lunik — Mon, 25 Feb 2008 20:25:00 GMT

Exchange Server 2007 Update Rollup 6 is available on the Microsoft Download Site. If you haven't tried Microsoft Silverlight yet - here's your chance!

Silverlight Enabled Query on Microsoft Download for 'Exchange 2007 Update Rollup'.

Reference Material for Update Rollup 6 for Exchange Server 2007 are in KB 942846.

Update Rollup 6 for Exchange Server 2007

Confirmation on this Rollup: As of 2-26-2008 Update Rollup 6 is an 'Either/Or' Rollup. Meaning - Either you apply Update Rollup 6 to Ex2k7 RTM - Or - Apply Ex2k7 SP1 without Rollup 6! A Blog Entry from Nino Bilic clarifies this fact!

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Group Policy Settings Reference for Windows Server 2008

lynn lunik — Wed, 06 Feb 2008 11:20:00 GMT

The Windows 2008 Group Policy Settings References is available on the Microsoft Download Web Site. This Excel Worksheet provides detail for all Group Policy Settings beginning with Windows 2000.

Group Policy Settings Reference for Windows Server 2008

Additionally, if you are searching for the Group Policy Settings Reference for Windows Vista you will find it in this Blog entry.

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Automated Installation Kit (AIK) for Windows 2008 and Vista SP1

lynn lunik — Tue, 05 Feb 2008 11:51:00 GMT

The supporting tools for Windows 2008 are becoming available on the Microsoft Download Web Site. One such tool, the Windows Automated Installation Kit (AIK) is now available. AIK makes provisioning, configuring, restoring, and installing Windows 2008 Servers through automated scripts, tools and installation methods. If you have worked with WinPE, ImageX, Remote Installation Services, Windows Deployment Services, Unattended Installation, Automated Deployment Services or Configuration Manager 2007 these are required tools!

Automated Installation Kit for Windows 2008 and Vista SP1

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecurecom

System Center Capacity Planner 2007 RTM

lynn lunik — Tue, 05 Feb 2008 11:05:00 GMT

System Center Capacity Planner 2007 has Released to Manufacturing (RTMed). This is good news for Organizations considering the Operational requirements for developing a reliable, secure, robust configuration of a number of Microsoft Products.

I offered insights in a separate Blog entry about SCCP2k7 RC here which you may find of interest.

System Center Capacity Planner 2007 Main Web Page

System Center Capacity Planner 2007 - Microsoft Download

Performance Model for Microsoft Office SharePoint Server 2007 and Windows SharePoint Services 3.0

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

SC Operations Manager 2007 - January 2008 Management Pack Extravaganza!

lynn lunik — Tue, 29 Jan 2008 10:48:00 GMT

The System Center Operations Manager 2007 Team has made available revised versions of a number of 'core' Management Packs. The list of Management Packs made available as of January 17, 2008 includes the following:

Windows Client 2000/XP OS Management Pack
System Center Operations Management 2007 Management Pack Update
Windows Server 2000/2003 OS Management Pack
Windows SharePoint Services 2.0 Management Pack
Terminal Services 2000/2003 Management Pack
Microsoft Information Worker Management Pack
SharePoint Portal Server 2003 Management Pack
Internet Information Server 2000/2003 Management Pack
Exchange Server 2003 Management Pack
Active Directory 2000/2003 Management Pack

If you are looking for the release of an updated Management Pack for SQL 2005 you will find details in this Blog Entry. Additionally, the Management Pack for Exchange 2007 for SCOM2k7 is available as referenced in this Blog Entry.

You will find the cumulative list of Management Packs released on 1-17-2008 at the following URL. Additionally, I have included a Screen Capture of what you should see in this Microsoft Download Query with the referenced Management Packs highlighted.

System Center Operations Manager Management Pack Query on Microsoft Download

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

Deploying System Center Data Protection Manager 2007

lynn lunik — Wed, 23 Jan 2008 09:45:00 GMT

The Definitive Guide to Deploying System Center Data Protection Manager 2007 is here!

If you have been searching for a mechanism to securely, reliably Backup, Protect and Restore a number of specific Microsoft Products (Exchange 2003, Exchange 2007, SQL 2005, MOSS 2007, etc.) spend some time working with System Center Data Protection Manager 2007. This reference document details the best methods for setup, configuration and maintenance of SCDPM2k7 in your Production Environment.

Deploying System Center Data Protection Manager 2007

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

IEEE 802.11 Wireless LAN Security with Microsoft Windows

lynn lunik — Wed, 23 Jan 2008 09:16:00 GMT

The document titled 'IEEE 802.11 Wireless LAN Security with Microsoft Windows' has been updated as of January 2008. If you are attempting to understand how the Windows Platform offers Windows Services utilizing IEEE 802.11 Wireless LAN Security incorporating mainstream Wireless Network Devices this document will be of value. This document is focused on 'how 802.11 Wireless LAN Security works' and not 'how to configure 802.11 Wireless LAN Security'.

IEEE 802.11 Wireless LAN Security with Microsoft Windows

Additionally, if you are looking for reference links on 802.11 Wireless LAN Security (and Wired LAN Security) here are a few from my URL Library:

Deployment of IEEE 802.1X for Wired Networks Using Microsoft Windows

Windows Server 2003 Internet Authentication Service (IAS) Operations Guide

Wireless Deployment Technology and Component Overview

Deployment of Protected 802.11 Networks Using Microsoft Windows

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com

System Center Configuration Manager 2007 Toolkit

lynn lunik — Thu, 17 Jan 2008 20:20:00 GMT

All of us accustomed to SMS 2003 have grown used to using the Tools from the SMS Toolkit V2.0. Here are some of the Tools advanced to support System Center Configuration Manager 2007. Here is the list of tools per the Microsoft Download Site:

System Center Configuration Manager 2007 Toolkit

Client Spy

Policy Spy

Trace32 - A log viewer that provides a way to easily view and monitor log files created and updated by Configuration Manager 2007 clients and servers.

Security Configuration Wizard Template for Configuration Manager 2007

DCM Model Verification

DCM Digest Conversion

DCM Substitution Variables

Lynn Lunik
Independent Security Consultant
Windows(R) Platform
IT Pro Secure Corporation
blog <at> itprosecure.com