You Really Gotta Fix THIS one...
Microsoft late Wednesday alerted customers to a critical flaw
affecting all versions of Windows since Windows NT 4.0 and
Windows 98. The problem in the Windows Script Engine could allow
attackers to run code of their choice on the systems of users who
visited a malicious Web page or opened a malformed HTML e-mail.
An attacker could exploit the vulnerability by constructing a
Web page that, when visited by the user, would execute code of
the attacker's choice with the user's privileges. The Web page
could be hosted on a Web site or sent via e-mail. Oh, and they
found another buffer overflow leak in IIS.
More at the ENT site:
RIM, Sprint Back Microsoft Phone Platforms
Application and device options for Microsoft's phone platforms will
expand with announcements at the CTIA Wireless trade show in New
Research In Motion (RIM), in Waterloo, Ontario, plans to help users
of Microsoft-based phone devices take advantage of its Blackberry
wireless e-mail technology, and U.S. mobile operator Sprint PCS
Group this year will deliver two more CDMA (Code Division Multiple
Access) devices that use the Microsoft platform. Full story at:
Group Policy Management Console (GPMC) Beta now at MS
Group Policy gives IT administrators fine-grain control over their
Windows computing environments by enabling proactive policy-based
management of critical IT functions, such as security management,
user management, data management, software access, and configuration
management. With Group Policy, administrators can manage groups of
users and IT assets across administrative entities such as computers,
domains, sites, and organizational units.
Core Group Policy infrastructure and functionality were first
provided with Windows 2000 Server. Windows Server 2003 provides
enhancements to Group Policy including the ability to:
Easily determine actual Group Policy settings on target entities.
Perform what-if simulations regarding the effects of Group
Policy settings. Features:
- A user interface (UI) that makes Group Policy much easier to use.
- Backup/restore of Group Policy objects (Goes).
- Import/export and copy/paste of GPOs and Windows Management
Instrumentation (WMI) filters.
- Simplified management of Group Policy-related security.
- HTML reporting for GPO settings and Resultant Set of Policy
- Scripting of Group Policy-related tasks that are exposed within
this tool (not scripting of settings within a GPO).
GPMC Beta 2 is available for download by members of the Customer
Preview Program (CPP), which is open to anyone who registers. For
more information about the CPP, see Windows Server 2003 Customer
Preview Program. To register for the CPP, see Sign Up for Windows
Server 2003 RC2. The final version of GPMC is planned to be released
as a Web download to customers licensing Windows Server 2003:
Active Directory Administration Tip
You have undoubtedly heard about IntelliMirror, but do you know how
the thing works and how you would configure it? As you probably
suspect, configuring it is all a part of the work you do with
Active Directory, and it's easier than you might have thought.
In fact, it's all a part of setting up the appropriate GPOs:
Check here for a great AD Security Analysis Tool: