Manage your WServerNews profileWServerNews privacy policy
WServerNews (formerly W2Knews)
Vol. 13, #21 - May 26, 2008 - Issue #675
New Virtual Server Products Released

This issue of WServerNews is sponsored by
  1. Editor's Corner
    • WinXP On Death Row?
    • We Need Your Virtualization (and Mac) Input!
    • Quotes of the Week
  2. Admin Toolbox
    • Admin Tools We Think You Shouldn't Be Without
  3. Tech Briefing
    • Symantec Pins Blame For XP SP3 Registry Corruption On Microsoft
    • HP Now Fixing XP SP3 Problems
    • Complimentary Seminar: Top Performance for SQL, Exchange & WinServers
    • Tip: Security Tools That Can Boost Windows Mobile Security
    • Top 10 Microsoft Exchange Server 2003 Registry Hacks
    • Virtualization And 64-Bit: A Match Made In Windows Heaven
    • Changes To UAC In Vista SP1: Much Less Than Meets The Eye
  4. Windows Server News
    • New Virtual Server Products Released
    • Into SBS? Here's What's New in Small Business Server 2008
    • Microsoft To Support ODF, PDF In Office Next Year
    • Redmond Pulls Windows Home Server Backup Feature
  5. WServer Third Party News
    • NewsGator Enterprise Server - At No Cost
    • This Week's Batch of Holes
  6. WServerNews FAVE Links
    • This Week's Links We Like. Tips, Hints And Fun Stuff.
  7. WServerNews - Product of the Week
    • Do's and Don'ts of RODC in W2K8 - Free eBrief from Greg Shields
Do's and Don'ts of RODC in Windows Server 2008 - Free eBrief from Greg Shields

Receive new eBrief from noted IT consultant and author Greg Shields on understanding Security implications of RODC's in Server 2008 when you try Active Administrator from ScriptLogic. Active Administrator is a comprehensive AD management and auditing solution providing centralized auditing, RSoP, offline GPO repository, & object-level restores of AD objects. In the eBrief, learn best practices for implementing RODC's (Read-Only Domain Controllers) new in Windows Server 2008, & implications for its uses. Download now!
http://www.wservernews.com/080526-RODC-eBrief

Editor's Corner

WinXP On Death Row?

I had to laugh when InfoWorld columnist Robert Cringely said: "Microsoft finally released XP's Service Pack 3 to the masses last week, which is a bit like telling someone on death row you finally got around to fixing their car. Then it turns out your car may not really run, and if you have the wrong model you'll never get out of Park." I googled the average time inmates are on death row and it turns out it's about 11 years! Good 'ol Cringe wasn't far off the mark, as a lot of us are going to use it for as long as that. More SP3 problems, this time with Symantec. Read on!

We Need Your Virtualization (and Mac) Input!

Remember last week's invite for this survey? The results start to look extremely interesting, but we need more people filling it out. Please take a few minutes, it will be worth it! Here is the official invite: Yankee Group and Sunbelt Software are conducting an independent survey on two hot technology topics: virtualization and the increased presence of Apple Macs in the corporate network. We will post an Executive Summary of the survey results in an upcoming issue of this newsletter. And as always, anyone who participates and completes the survey, is eligible to get a complimentary copy of the full Yankee Group Report by sending an Email to Laura DiDio at: [email protected] So again, this is no more than 5 minutes, if that, point-and-click. Thanks a mil!
http://www.wservernews.com/080526-Yankee-Survey


Quotes of the Week

"The illegal we do immediately. The unconstitutional takes a little longer." -- Henry Kissinger, former US Secretary of State (Source: New York Times, Oct. 28, 1973)

"Life's Rule #1: Once you pull the pin, Mr. Grenade is no longer your friend." (from Murphy's Law on Wikiquote.org. There are many more quite funny Murphy variations, both attributed and unattributed):
http://www.wservernews.com/080526-Wikiquote

Thank you for being a WServerNews subscriber. Please tell your friends about us. They can subscribe here:
http://www.wservernews.com/080526-Subscribe

Hope you enjoy this issue of WServerNews! Warm regards, Stu Sjouwerman  |   Email me: [email protected]

Sunbelt Exchange Archiver Wins 'Most Valuable Product' Award

The in-depth review of SEA in Redmond Magazine said: "Sunbelt Exchange Archiver makes e-mail archiving and retrieval accessible to the rest of us. In particular, the installation and user documentation are among the best I've seen, and help make the product very usable. If you have a good reason for ensuring your e-mail archives are accurate and easily accessible, Exchange Archiver may be the best way of achieving those goals." Read the full review:
http://www.wservernews.com/080526-SEA-Review

Register for a one-on-one product walkthrough over here:
http://www.wservernews.com/080526-Sunbelt-Exchange-Archiver

Admin Toolbox

Admin Tools We Think You Shouldn't Be Without

Download Active Administrator and receive a free eBrief written by Greg Shields:
http://www.wservernews.com/080526-eBrief

Must Have FREEWARE, Web Active Directory & Self Service Password. Download now! Let users self-manage their profiles -but stay in control using native & delegated roles:
http://www.wservernews.com/080526-Namescape

iPrism...Better than Websense, Better than 8e6 - Better Get a Quick Quote!:
http://www.wservernews.com/080526-iPrism

FREE Self-Service Change Password SharePoint Webpart and Web Interface for Active Directory & AD/AM. Installs in Minutes. Get Started Today!:
http://www.wservernews.com/080526-AdSelfServiceSuite

Virtualization Technologies and their impact on Disaster Recovery Planning Read this Double-Tale white paper to learn more about enterprise-class disaster recovery and high availability solutions for cutting-edge virtual environments:
http://www.wservernews.com/080526-DT-WhitePaper


Tech Briefing

Symantec Pins Blame For XP SP3 Registry Corruption On Microsoft

Symantec denied this week that its PC security software Norton Internet Security and Norton 360 is the cause for the severe problems on some users' PCs after the XP SP3 upgrade. The problem empties Windows' Device Manager and deleted network connections, preventing some users from connecting to the Internet or to wireless networks. Here is the TechNet Forum Thread about it:
http://www.wservernews.com/080526-Symantec-Registry-Corruption


HP Now Fixing XP SP3 Problems

HP is working with Microsoft to issue a new patch that will fix the problems for customers with certain AMD-based PCs. Customers can visit www.hp.com and enter the patch name SP37394 in the search box to download the fix. When the update is available, the search results screen will list the update with instructions for downloading and installation.

Complimentary Seminar: Top Performance for SQL, Exchange & WinServers

Spend a half-day out of the office to learn how to achieve superior server performance through tuning of your current infrastructure and major apps - SQL and Exchange. Nelson Ruest, an independent expert and Microsoft MVP for Windows Server, will also review the latest editions of these apps and provide tips and best practices on how to maximize the benefits inherent with upgrading to each - Windows Server 2008, Exchange Server 2007, and SQL Server 2005/2008. This free event is coming to Chicago, IL on June 3rd and Baltimore, MD on June 5th. Don't miss out, register today!
http://www.wservernews.com/080526-Performance-Seminar


Tip: Security Tools That Can Boost Windows Mobile Security

If you've had trouble in the past finding security tools for your Windows mobile devices, look no further. SearchWindowsSecurity.com contributor Kevin Beaver has analyzed and compiled a collection of must-have mobile security tools. (registration required)
http://www.wservernews.com/080526-Mobile-Security-Tools


Top 10 Microsoft Exchange Server 2003 Registry Hacks

Optimize your Exchange Server performance by using ten useful registry tweaks to automate time consuming administrative tasks. This reference guide shows you how to modify the registry to disable unauthorized use of .PST files, allow batch files and bulk mailings, troubleshoot Exchange ActiveSync errors and more. (registration required)
http://www.wservernews.com/080526-Exchange-2003-Registry-Hacks


Virtualization And 64-Bit: A Match Made In Windows Heaven

As virtualization becomes more popular in Windows environments, it's important to know how to get the best performance from the technology. In this tip, SearchWinComputing.com contributor Christa Anderson explains why the implementation of 64-bit operating systems and virtualization should go hand in hand.
http://www.wservernews.com/080526-64-bit-Virtualization


Changes To UAC In Vista SP1: Much Less Than Meets The Eye

A video is making the rounds showing how Vista SP1 has significantly improved Vista's immensely annoying User Account Control (UAC). But there appears to be less to the improvement than meets the eye --- hardly any changes were made to UAC in SP1, and it remains a very big Vista annoyance. To view the rest of this post, click the following link:
http://www.wservernews.com/080526-Vista-UAC-Changes


Windows Server News

New Virtual Server Products Released

Funny how product development cycles of competing products often seem to synch up with one another. VMware refreshed its Workstation product with a new build, and at the same time Redmond came out with a new SP1 updates of both of its platforms, Virtual PC 2007 and Virtual Server 2005 R2.

It's clear to everyone that Redmond really wants us to start using the new Hyper-V code. So why would they create a service pack for "old" virtualization technology? Well, there really is not all that much new in these 'fresh' free versions from VMware or Redmond. Microsoft only threw out SP1 to support their new OSen.

In the mean time, Hyper-V went to RC1, and can be downloaded. Keep in mind that this is actually Microsoft's second release candidate. The first one was called RC Zero and was shipped this March.

Hyper-V RC1, made for W2K8 64 adds support for additional guest OSen and is feature-complete but needs spit & polish, like making it compatible with System Center Virtual Machine Manager 2008 (SCVMM). Expect it this summer.

And talking about virtualization, Citrix this week released its on-demand XenDesktop, the code that delivers custom, managed virtual Windows desktops from a data center server to a user over the network. There's a free Express Edition for up to 10 users; an entry-level Standard Edition for $75 per concurrent user and then it increases with steps to a Platinum Edition for $395 per concurrent user.

Back to Redmond though. The new release of Virtual PC 2007 SP1 now supports:
  • Vista SP1 Business, Ultimate, and Enterprise as a host and guest
  • WinXP SP3 as both a guest and host
  • W2K8 Standard as a guest
The new release of Virtual Server 2005 R2 SP1 now supports:
  • Additional host operating system support that includes W2K8 Core, Standard, Enterprise, Datacenter, and Small Business Server
  • And nonproduction host operating system support for Vista Ultimate SP1, Vista Business SP1, Vista Enterprise SP1, WinXP Pro SP3.
  • Guest OS support for W2K8 Core, Standard, Enterprise and Datacenter, W2K8 2008 SBS, Vista Ultimate SP1, Vista Business SP1, Vista Enterprise SP1 and WinXP Pro SP3.
Download Virtual PC 2007 SP1 at:
http://www.wservernews.com/080526-Virtual-PC-2007-SP1

Download Microsoft Virtual Server 2005 R2 SP1 Update.
http://www.wservernews.com/080526-Virtual-Server-2005-R2-SP1


Into SBS? Here's What's New in Small Business Server 2008

Paul Thurrott, News Editor of WindowsITPro, wrote a helpful article that if you plan to upgrade will clarify a lot. I starts out like: "In last week's commentary, I discussed the pricing and licensing issues for Windows Small Business Server (SBS) 2008 and Windows Essential Business Server 2008. In the case of SBS 2008, I believe the new pricing scheme will be the most (needlessly) controversial aspect of this upgrade, given the mistaken impression that costs are rising across the board. But with that out of the way, I'd like to focus on what these two products bring to the table in terms of new features. To view the rest of this article, click here:
http://www.wservernews.com/080526-SBS-2008


Microsoft To Support ODF, PDF In Office Next Year

Microsoft announced that it is finally adding support for ODF (Open Document Format for Office Applications) and Adobe Systems Inc.'s PDF file format to its Office productivity suite. Support for ODF and PDF will be included in the software through Microsoft Office Service Pack 2, which is expected to be out in the first half of 2009, according to a draft Microsoft press release viewed by the IDG News Service. Specifically, the service pack will add file-format support for PDF 1.5, PDF/A and ODF Version 1.1, as well as XPS (XML Paper Spec). A format similar to PDF, XPS was created by Microsoft to rival Adobe's popular document-exchange file format. More at ComputerWorld:
http://www.wservernews.com/080526-Office-ODF-PDF


Redmond Pulls Windows Home Server Backup Feature

Microsoft confirmed on May 16 that it has yanked parts of a backup feature from a major upgrade to its Windows Home Server software scheduled for release later this year.

Recent posting on several blog sites, including "We Got Served" last week and ZDNet's "All About Microsoft", said that the database backup feature of the upcoming Power Pack 1 had been pulled from the update.

The We Got Served blog cited several messages on the Windows Home Server (WHS) support forum from Power Pack 1 beta testers who claimed server-wide backup had been ditched because of difficult-to-solve bugs. More at:
http://www.wservernews.com/080526-Windows-Home-Server-Backup


WServer Third Party News

NewsGator Enterprise Server - At No Cost

The NewsGator guys have made available a free version of NewsGator Enterprise Server for up to 20 users. This is not a timed version, it's free... zero, zip, nada. This is a pretty rich product, much more than a proxy for RSS feeds. If you are evaluating enterprise RSS you can take advantage of this download to setup a test environment. This has been a very successful product for them, but the fact remains that they've been selling it into the global 2000 segment and not really paying attention to the SME market.

It's not likely that they will ramp up a dedicated SME initiative any time so making the 20 user version available gives smaller companies something they can use and as their requirements and users expand they can upsell you. Their enterprise customers have a full range of support options, for the free version they are limiting support to forums and their knowledge base: Here it is:
http://www.wservernews.com/080526-NewsGator


This Week's Batch of Holes

SNSI uses the latest Mitre Common Vulnerabilities and Exposures (CVE) list of computer incidents. It also contains the latest SANS/FBI top 20 vulnerability list. SNSI also uses the latest CERT, CIAC Microsoft and FedCIRC (Department of Homeland Security) advisories.
New Checks
H0030 Wu-ftpd Local Directory Escape - HP-UX 11
H0156 Useradd incorrect access validation - HP-UX 11
L0634 Openoffice.org EMF image add error - FC
L0635 Firefly mt-daapd ws_getpostvars error - FC
L0640 Libfishsound file header validation error - FC
L0677 Lighttpd connection_state_machine flaw - FC
L0684 Perl-Imager Input/Output channel difference weakness - FC
L0686 ClamAV multiple vulnerabilities - FC
L0711 SIPp get_remot_video crafted SIP message flaw - FC
L0712 Libvorbis residue Xiph.org & audio processing flaws - FC
L0714 Rdesktop xrealloc^ process_redirect & iso_recv_msg errors - FC
L0715 LICQ file-descriptor exhaustion flaw -- FC
L0716 TCl/TK ReadImage function flaw - FC
L0717 Bugzilla @reporter spoofing & Format for Printing errors - FC
L0718 CUPS image filter png & -zoom PNG flaw - FC
L0720 ZoneMinder field.c CPU consumption - FC
L0721 Blender imb_loadhdr and other flaws - SuSE
S0326 Print services multiple vulnerabilities - Solaris 8 - 10
S0427 Java Web Console may leak information - Solaris 8 - 10

Updated Checks H0150 Passwd ungraceful error recovery - HP-UX 11 W1142 Anti-virus Signature Outdated - McAfee W1986 Anti-virus Signature Outdated - Symantec W1999 Anti-virus Signature Outdated - Trend Micro W2067 Anti-virus Signature Outdated - F-Secure W2070 Anti-virus Signature Outdated - CA eTrust W2939 Flash Vulnerabilities on XP
Sunbelt Network Security Inspector version 1.6.102.0 was released May 23, 2008.

Sunbelt Software recommends you download the new SNSI version 1.6.102.0, scan, and patch your machines today. To get the latest SNSI version, visit:
http://www.wservernews.com/080526-SNSI


WServerNews FAVE Links

This Week's Links We Like. Tips, Hints And Fun Stuff.



WServerNews - Product of the Week

Do's and Don'ts of RODC in W2K8 - Free eBrief from Greg Shields

Receive new eBrief from noted IT consultant and author Greg Shields on understanding Security implications of RODC's in Server 2008 when you try Active Administrator from ScriptLogic. Active Administrator is a comprehensive AD management and auditing solution providing centralized auditing, RSoP, offline GPO repository, & object-level restores of AD objects. In the eBrief, learn best practices for implementing RODC's (Read-Only Domain Controllers) new in Windows Server 2008, & implications for its uses. Download now!
http://www.wservernews.com/080526-Active-Administrator-eBrief