MY PROFILE | PRIVACY 
Vol. 15, #40 - Oct 4, 2010 - Issue #799
Biggest IT Insider Threat? YOU!

This issue of WServerNews is sponsored by
  1. Editor's Corner
    • Biggest IT Insider Threat? YOU!
    • Quotes of the Week
  2. Admin Toolbox
    • Admin Tools We Think You Shouldn't Be Without
  3. Webinars & Seminars
    • VIPRE Enterprise Premium Product Demonstration - 10/5
    • VIPRE Email Security for Exchange Product Demonstration - 10/12
    • Hyper-V Live Migration: Step-by-Step - 10/14
  4. Tech Briefing
    • Which Training To Include In My Resume? (Humor)
    • Cisco: LinkedIn Users Hammered With Malware
    • Microsoft Security Essentials: Free, So What's The Catch?
  5. Windows Server News
    • Microsoft Released SQL Server 2008 Second Service Pack
    • Exchange Server Certification Explained
    • Launching VMware ThingApps in View 4.5
    • How To Prevent Data Loss, Downtime When Virtualization Problems Hit
    • Cloud Computing Outages: What Can We Learn?
    • Virtual Desktops Offer Multiple Paths To Windows 7
  6. Third Party News
    • Update 1, Hotfix 1 - VIPRE Enterprise Agent Release
  7. WServerNews FAVE Links
    • This Week's Links We Like. Tips, Hints And Fun Stuff
  8. WServerNews - Product of the Week
    • myPassword. Securing your business, one password at a time.
myPassword. Securing your business, one password at a time.

Whether providing highly secure access to key company systems from home or abroad, rock solid authentication and password policies are critical to preventing expensive and potentially devastating security breaches. myPassword is a powerful and easy to use, self-service password management solution that provides end users with an affordable, secure method to reset forgotten passwords, meet complexity requirements and manage locked accounts. myPassword minimizes user downtime, dramatically reduces Help Desk costs and provides an immediate and measurable ROI to your organization.
http://www.wservernews.com/101004-My-Password

Editor's Corner

Biggest IT Insider Threat? YOU!

Someone finally woke up. Ellen Messmer at NetworkWorld accurately stated that the biggest threat in IT are the insiders that put the networks together, make changes to it, and know more about what's on it and how it works than anyone else. Duh, tell me something new...

Yes, when a DB admin, network or system admin goes rogue, they become the very insider threat that they are supposed to watch against. But here is where the story gets interesting. They have a link to another article with 6 tips for guarding against rogue sys admins. That goes more into technology solutions on "who is watching the watchers".
http://www.wservernews.com/101004-Insider-Threat

It's of course to a large degree the management of the rights and privileges that is the key to control in this area, and enterprise-level password management tools are becoming more popular. However, other more sinister things are at hand. Last week I installed a new projector in my office (a new Casio laser-based device which is very sharp) and grabbed a DVD from the house to test with: Steven Spielberg's Minority Report. In the movie, police belonging to a special Pre-crime unit arrest people for crimes they would commit in the future. Sci-fi, and not likely to happen in our lifetimes.

However, guess what I read today in Mike Elgan's newsletter? 'Pre-crime' comes to the HR Department. He claims the pre-crime concept is coming very soon to the world of Human Resources and employee management. Following the current trend lines, social networking spiders and predictive analytics engines will soon be working night and day scanning the Internet and using that data to predict what every employee is likely to do in the future. This capability will simply be baked right in to HR software suites.

In fact, Google is already doing this. The company has software that knows who is going to quit -- even before that person knows. Wow, talk about Big Brother:
http://www.wservernews.com/101004-Big-Brother


Quotes of the Week

"Truth is not only violated by falsehood; it may be equally outraged by silence." -- Henri Frederic

"Gentlemen, when the enemy is committed to a mistake we must not interrupt him too soon." -- British naval commander Horatio Nelson

Intel CEO: "We need antivirus, can someone buy me McAfee?" Few hours later: "Done." "Great, which version?" "Version ... ?". Reminds me of a line from The Top 10 Entries in Bill Gates Diary: "Note to self: Next time Melinda says we need to buy China, she means dishes." -- Ben Scott

Warm regards, and thank you for being a WServerNews subscriber. No trees were killed in the sending of this message, but a large number of electrons were terribly inconvenienced. Please tell your friends about us. They can subscribe here:
http://www.wservernews.com/101004-Subscribe

PS: Did you know this newsletter has a sister publication for XP users called WXPnews? You can subscribe here, and tell your friends:
http://www.wservernews.com/101004-Wxpnews-Subscribe

PPS: And now we have our new Win7News! You can subscribe here, and tell your friends:
http://www.wservernews.com/101004-Win7-Subscribe

Hope you enjoy this issue of WServerNews! Warm regards, Stu Sjouwerman  |   Email me: [email protected]

VIPRE Enterprise. Number One In Proactive Protection

VIPRE Enterprise provides the performance and protection you need to achieve total endpoint malware protection, all managed from a central console.
  • COMPLETE - All-in-one protection from today's malware
  • FAST - High-performance and low impact on system resources
  • EASY - Manage everything from one central command center
  • RELIABLE - Configurable, real-time monitoring technology
  • AFFORDABLE - 50% Competitive Upgrade Test drive VIPRE Today!
Call us for a quote at: 1-800-688-8404, or fill out the form:
http://www.wservernews.com/101004-50-Percent-Off-Vipre

Admin Toolbox

Admin Tools We Think You Shouldn't Be Without

rDirectory's Community Edition is a pre-configured, easy to use, web-based directory and search engine that downloads in just minutes - and it's absolutely free!
http://www.wservernews.com/101004-rDirectory-Community-Ed

Download the free sl360 Suite of Network Troubleshooting Tools Ping Scan, WMI Scan, TFTP Server, Syslog Server and a dozen more tools.
http://www.wservernews.com/101004-SL360-Network-Troubleshooting-Tools


Webinars & Seminars

VIPRE Enterprise Premium Product Demonstration - 10/5

Join us for a look at VIPRE Enterprise Premium Version 4, powerful, high-performance endpoint malware protection, which combines antivirus, antispyware and now firewall into a single agent. Plus take a deep dive into other new features including scalable multi-site tiering and role-based access control.

Tuesday, October 5, 2010, 2:00pm - 2:30pm EDT
http://www.wservernews.com/101004-Vipre-Demo


VIPRE Email Security for Exchange Product Demonstration - 10/12

Securing your Exchange Server is key to protecting your enterprise environment from spam, viruses, phishing, and other messaging threats. In this product demonstration, learn how the new version of VIPRE Email Security for Exchange (formerly Ninja Email Security) can help protect your network and cut your Exchange admin time in half with this powerful, policy-based email security product:

Tuesday, October 12, 2010, 2:00pm - 2:30pm EDT
http://www.wservernews.com/101004-Exchange-Demo


Hyper-V Live Migration: Step-by-Step - 10/14

"Playbook to a Seamless Hyper-V Live Migration"

Windows Server 2008 R2's Hyper-V live migration feature enables you to move virtual machines between Hyper-V hosts with no end user downtime. It also can blend seamlessly into existing IT environments. A live Hyper-V migration allows for:
  • Data center consolidation and migration
  • Ease of management
  • End-to-end disaster recovery
  • Application workload balancing
  • Zero downtime maintenance
In this first half of this web seminar, Michael Otey, technical director for Windows IT Pro and SQL Server Magazine, will explain the architecture and requirements of a live migration. He will then go through a step-by-step guide showing you how to configure the Windows Server infrastructure for live migration.

In the second half, we will discuss common deployment scenarios for live and quick migration. We will also present a customer case study and benefits to help you make an informed decision on deploying this solution.

Register for this live web seminar to learn the ins and outs:
http://www.wservernews.com/101004-Hyper-V-Live-Migration


Tech Briefing

Which Training To Include In My Resume? (Humor)

Below is a discussion on the NTSYSADMIN list this week. This is a free list for system admins, sponsored by Sunbelt/GFI, that has been running for well over 10 years. This discussion started out like this: (abbreviated)

Q - Is there any value is listing on your "long" resume individual classes you've taken? I hit New Horizon's 1-2x/year on average, keeping up with Server and desktop OS's, PowerShell, etc (in fact in two weeks I have a 5-day class on Win 7). Just seems a little dorky to list a class or six when they're not degree-related.

A: The only time I list any classes is when a job states that specific knowledge is required and I took a class in that specific area. I have a long resume for my records and pick and choose what is most appropriate for a given job. My last cert was MCSE NT4 but I've taken a number of training courses since then and listing them all would waste too much space.

Then, Gary Slinger wrote: "I find including my training classes inappropriate". "Shotgun I, Shotgun II, Advanced Fighting Rifle, Tactical Trauma Care...etc" just seems to give the wrong impression :)

Then, the comment that hit it out of the park and made me ROTFLMAO:

Seems appropriate to me for a g.slinger! It says :

1) "I know how to deal with difficult situations and achieve stunning and unforgettable results" (Shotgun I)
2) "Always seeing continual development with my negotiation skills" (Shotgun II)
3) "Seek ongoing improvement in my abilities to execute" (Advanced Fighting Rifle)
4) "I have proper the skill set for remediation" (Tactical Trauma Care)

Pretty clear to me, you're hired! I don't want a mindless "yes" man.

Cisco: LinkedIn Users Hammered With Malware

Twitter users aren't the only social networkers suffering the brunt of malicious cyber criminals today. LinkedIn members are reportedly being heavily targeted with fake connection requests that direct users to unwittingly download data-theft malware.

These fake LinkedIn requests accounted for as much as 24 percent of all spam sent within a 15-minute interval earlier today, according to Cisco. Clicking the link takes victims to a Web page that reads "PLEASE WAITING .... 4 SECONDS," then redirects them to Google. More at InfoWorld:
http://www.wservernews.com/101004-Linked-In-Malware


Microsoft Security Essentials: Free, So What's The Catch?

InfoWorld's Peter Bruzzese got it right. He succinctly put all the the highlights in this story, and saves us all a lot of time. From my own perspective, when you get to more than a few dozen machines, you badly need an admin console that allows you to manage all those machines from your own workstation. That feature is not there in MSE, and it only will be free for small businesses to install on up to 10 PCs. More at:
http://www.wservernews.com/101004-Microsoft-Security-Essentials


Windows Server News

Microsoft Released SQL Server 2008 Second Service Pack

Redmond released Service Pack 2 for SQL Server 2008 product this week. The company said the update brings SQL more into line with their current SQL Server 2008 R2 technology, which was released in April this year.

"Service Pack 2 for SQL Server 2008 includes new compatibility features with SQL Server 2008 R2, product improvements based on requests from the SQL Server community, and hotfix solutions provided in SQL Server 2008 SP1 Cumulative Update 1 to 8," said a spokesperson.

MS said the service pack allows you to knit reporting services together with SharePoint products. Additionally, Microsoft applied several management improvements and beefed up the database engine in SQL Server 2008, which now supports all data-tier application (DAC) operations. The full rundown and relevant download links are at:
http://www.wservernews.com/101004-SQL-Server-2008


Exchange Server Certification Explained

The topics of education and certification are often the center of great debate within the IT community. This expert tip details exactly what you need to know when considering a formal background in Exchange:
http://www.wservernews.com/101004-Exchange-Server-Certification


Launching VMware ThingApps in View 4.5

With the latest releases, VMware improved integration between View 4.5 and ThinApp 4.6. Check out this exclusive article to learn more of the benefits of this new integration and for a comprehensive walkthrough on how to publish VMware ThinApps in 4.5:
http://www.wservernews.com/101004-Launching-VMware-ThingApps


How To Prevent Data Loss, Downtime When Virtualization Problems Hit

Even the smallest of virtualization problems can turn into emergencies. Learn how you can prevent critical data loss and downtime during virtualization issues:
http://www.wservernews.com/101004-Prevent-Data-Loss


Cloud Computing Outages: What Can We Learn?

Even the biggest and best cloud companies have seen their best-laid plans go to waste as their services go dark for hours at a time. This popular guide on cloud computing outages sheds light on what's going wrong and how IT managers and users can learn from each other's experiences:
http://www.wservernews.com/101004-Cloud-computing-Outages


Virtual Desktops Offer Multiple Paths To Windows 7

Many IT shops are getting ready to upgrade from Windows XP to Windows 7, if they haven't started already. Do you virtualize endpoints or stick to the time-honored upgrade process? Ensure you choose the right path with this featured article:
http://www.wservernews.com/101004-Virtual-Desktops


Third Party News

Update 1, Hotfix 1 - VIPRE Enterprise Agent Release

VIPRE Enterprise 4.0 Agent Update 1, Hotfix 1 - Released Sept 29, 2010

We are very pleased to announce the upcoming release of our Update 1, Hotfix 1 agent for VIPRE Enterprise and VIPRE Enterprise Premium. The version number for this agent release is 4.0.3907, and will be available on Wednesday, September 29, 2010 at approximately 4:00pm EDT (GMT -400).

This is a very important update, as it solves a pain point that some customers are experiencing when attempting to open an attachment via Outlook. Affected users may see the following error when attempting to open an attachment:

"The attachment [attachment_name] from the message [subject] is open or in use by another application. If you continue, you will lose any changes you made to the attachment that is using the other application. Do you want to continue?" (Note: This error verbiage may slightly vary depending on your version of Outlook.)

This software update will not require a reboot for customers who are upgrading from agent version 4.0.3905. If you're ready to receive this update on September 29, 2010, please ensure that you have automatic agent software updates enabled at your site and policy levels. If you do not want to automatically download the new agent upon release, you should disable automatic software updates. Steps for handling this can be found via the following knowledge base article:
http://www.wservernews.com/101004-Hotfix-1

Thank you for choosing Sunbelt Software, part of the GFI Software family.

WServerNews FAVE Links

This Week's Links We Like. Tips, Hints And Fun Stuff



WServerNews - Product of the Week

myPassword. Securing your business, one password at a time.

Whether providing highly secure access to key company systems from home or abroad, rock solid authentication and password policies are critical to preventing expensive and potentially devastating security breaches. myPassword is a powerful and easy to use, self-service password management solution that provides end users with an affordable, secure method to reset forgotten passwords, meet complexity requirements and manage locked accounts. myPassword minimizes user downtime, dramatically reduces Help Desk costs and provides an immediate and measurable ROI to your organization.
http://www.wservernews.com/101004-Product-Of-The-Week