Global Object Access Auditing is Magic

Hi folks, Ned here again. I mentioned this once in a Friday Mail Sack but today I circle around and explain a well-hidden security feature added in Windows 7 and Windows Server 2008 R2: Global Object Access Auditing Oh boy, auditing! I bet you are excited! What is it and how to enable it You… Read more

RTM RSAT and SP1 Win7 (shot, over)

Hi all, Ned here. Update 4/7/11: The Remote Server Administration Toolkit update to support Windows 7 Service Pack 1 has released. Come and get it: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d  Yesterday we announced Windows 7 SP1 availability info. For those that use RSAT to admin from their clients, I am launching a preemptive strike before the comments flow: If… Read more

Service Pack 1 for Win7 and Win2008 R2 is RTM

Windows Server 2008 R2 and Windows 7 SP1 has shipped. Here’s the bottom line: Volume Licensed, MSDN and TechNet subscribers get access February 16. All customers get access February 22 through Windows Update and direct download. More info and high-fiving here at the Windows Server team blog. Besides the usual fixes and rollups, this SP… Read more

USMT 4 Update Released to Support Office 2010 Migrations, Fix Other Goo

Hi, David here. Some of you may have noticed that if you tried to migrate Office 2010 settings using USMT 4.0, the results were often less than ideal. Without going into a very long and ultimately meaningless explanation, this happened because USMT 4.0 didn’t have any of the information needed to know where Office 2010… Read more

SP1 and Directory Services: What’s New

Updated to include SP1 being RTM and some last minute fixes that were included post RCHi all, Ned here again. Back in October I joined the Windows Server 2008 R2 Service Pack 1 beta support team. Our job is to support customers in a special early adopters program. As SP1 has now released, I’m frequently… Read more

Friday Mail Sack: Not Particularly Terrifying Edition

Hiya folks, Ned here again. In today’s Mail Sack I discuss SP1, DFSR, GPP passwords, USMT, backups, AD disk configurations, and the importance of costumed pets. Boo. Win7/R2 SP1 RC in production USMT ramp up Daily DFSR health reports Recommendations for separating AD folders and files onto different disks GPP admin password maintenance DFSR read-only… Read more

Controlling USMT Desktop Shell Icon Behavior from XP (and how to create registry values out of thin air)

People of Earth! It is I, Ned – your benevolent alien dictator – back again to talk to you about USMT. A few customers have asked me how to prevent XP Classic Start Menu desktop icons from migrating to Windows 7. Since these aren’t true shortcuts, you have to do some gyrations to block these… Read more

Hunting down DES in order to securely deploy Kerberos

Hello folks, Ned here again. By now many businesses have begun deploying Windows Server 2008 R2 and Windows 7. Since Active Directory has become ubiquitous, Kerberos is now commonplace. What you may not know is that we made a significant change to default cryptographic support in Kerberos starting in Win7/R2 and if you are not… Read more

Top Solutions RSS feeds for Windows Server and Client now available

Ned here again. The MS Product Quality and Online team has released three new RSS feeds for Windows Server, Windows 7 Client, and Windows 7 IT Pro to get you to the “high impact issues” happening right now that have solutions. Great for proactive work, finding emerging issues, or seeing common problems. Here are the… Read more

Don’t mess about with USMT’s included manifests!

Ned here. Today I talk about the importance of the included USMT component manifests and how things can get gross when they are not available to Scanstate and Loadstate. Here’s you You are using USMT 4.0 to migrate from XP to Windows 7. You run scanstate on XP and it appears to work fine (no… Read more