Don Roessler's Blog

This blog will be a primary way for our Microsoft Partners to follow up on questions that needed research during my TS2 Partner Seminars across the United States.

November 2006 - Posts

vista will foil office file-formats attacks

Vista Will Foil Office File-Format Attacks

Vista's Address Space Layout Randomization approach will stop some kinds of exploits, notably those that rely on memory manipulation, by arranging key data areas randomly in the available address space.

By Gregg Keizer,  InformationWeek
Nov. 29, 2006
URL: http://www.informationweek.com/story/showArticle.jhtml?articleID=196600278

New security features of Vista, among them memory randomization, will make it more difficult for attackers to exploit some kinds of vulnerabilities, including those in Microsoft's Office suite, security researchers said Wednesday.

Users updating to Windows Vista will be protected from the kind of attacks that plagued Office users this summer, when a slew of unpatched Word, Excel, and PowerPoint bugs were exploited by hackers suspected of operating from China.

Thomas Dullien, chief executive and head of research at the reverse-engineering tool developer Sabre Security, kicked off the discussion in his blog, where he noted that Vista's Address Space Layout Randomization will make file-format attacks moot.

"Client-side bugs in MS Office are approaching their expiration date. Not quickly, as most customers will not switch to Vista immediately, but they are showing the first brown spots and will at some point start to smell," said Dullien, who also goes by the nom de plume "Halvar.Flake." ASLR, which has been used in the Unix world for over a decade, stymies some kinds of exploits, notably those that rely on memory manipulation, by arranging key data areas randomly in the available address space. Microsoft's debut of the technique will be in Windows Vista.

"ASLR should be more effective at blocking the kinds of attacks on Office seen this year," agrees Oliver Friedrichs, director of Symantec's security response team. "It will make exploitation of memory management vulnerabilities much more difficult. Even if a developer makes a mistake in coding memory management, it shouldn't manifest itself in an exploit."

Although Office users may be better protected against file-format exploits when running Vista, those who rely on other applications may not, warns Friedrichs. "Third-party software may still be susceptible to these kinds of attacks," he says, since developers have to explicitly compile ASLR capabilities into their products.

Nor will ASLR and other security technologies new to Windows in Vista stop all attacks. In fact, the rise of attacks that don't rely on vulnerabilities but that depend on so-called "social engineering" tactics to trick users into opening malware or visiting malicious Web sites can be directly traced to improvements in Windows XP that are being expanded upon by Vista.

"Vista will not mean the end of malicious code," Friedrichs says. "Stack and heap protection will make an impact, but attackers will learn to work within the confines of Vista. Windows XP already introduced some of these [defensive] technologies, and one can make a correlation between the decrease in the number of widespread worms and [security] improvements in Windows XP SP2." As Vista rolls out new security technologies, cyber criminals will simply continue to shift their points of attack. "Attackers are moving up the application stack because they're being pushed out of the operating system," says Friedrichs. "They're now moving up the application stack and to the Web layer.

"And as for Vista's overall impact, I can't speak to that yet," concludes Friedrichs. "It will be more effective at blocking some kinds of current attacks, but I suspect there will be whole new areas [for attackers] to explore."

Microsoft plans to launch Windows Vista, as well as Office 2007, in the United States at a New York City event Thursday.

Posted Thursday, November 30, 2006 11:51 AM by donroe | with no comments

idc pegs vista sales at 90 million in 2007

IDC Pegs Vista Sales At 90 Million In 2007

The research firm predicts that 90% of PCs sold to home users next year will be powered by one of the Windows Vista Home editions, but only 35% of new business computers will be equipped with Vista Business or Vista Enterprise.

By Gregg Keizer,  InformationWeek
Nov. 29, 2006
URL: http://www.informationweek.com/story/showArticle.jhtml?articleID=196600240

Adding its voice to the chorus forecasting Windows Vista uptake during 2007, IDC said Wednesday that it expects the new operating system to grab a beachhead of 90 million PCs next year, largely on the back of new computer sales to consumers.

IDC predicted that 90% of PCs sold to home users next year will be powered by one of the Windows Vista Home editions. Businesses, however, will take to Vista only a third as much: Just 35% of new computers deployed by companies during the year will be equipped with Vista Business or Vista Enterprise.

"The adoption of Windows Vista will take place almost immediately among consumers, while businesses will follow a decidedly more conservative adoption curve," said Al Gillen, an IDC research VP, in a statement.

IDC says Vista Home Basic will be the OS of choice on consumer PCs in 2007; it will appear on two out of every three new systems, the company said. The more expensive Home Premium will account for nearly all the remainder.

On the enterprise side, 82% of the Vista-equipped PCs will sport the Business edition, with the remaining 18% running Vista Enterprise.

Microsoft will hold a U.S. launch event in New York Thursday to introduce Windows Vista and the Office 2007 application suite.

Posted Thursday, November 30, 2006 11:48 AM by donroe | with no comments

Fired by Trump, she's hired by microsoft

Carolyn Kepcher of 'Apprentice' fame helps judge best small-biz idea

Updated: 5:22 p.m. ET Nov 28, 2006

NEW YORK - Carolyn Kepcher, who helped Donald Trump fire corporate wannabes on “The Apprentice” television show, took a new role Tuesday — helping Microsoft Corp. find the best small-business idea in America.

“It takes a big idea to create a big business,” Kepcher said. “And I’ve seen some ideas before.”

The winner of the Redmond, Wash.-based company’s "Ultimate Challenge” contest will get $100,000 in seed money, a storefront or other space in Manhattan for a year rent-free, and software to help get their business started.

Kepcher and fellow judges — maternity wear entrepreneur Liz Lange and Chris Caposella, a Microsoft vice president — began hearing ideas Tuesday in a computer-equipped recreational vehicle parked in midtown Manhattan.
Dozens of people waited in line for a chance to make their pitch.
Mary Miller, 38, a New Jersey municipal judge, won smiles from the judges with her idea for cafes for harried parents that would offer child care alongside cappuccinos. The cafes would be called Just Give Me a Minute.
“As a mom, I like it,” Lange said.
Kepcher, Lange and Caposella eventually will pick four finalists. The winner will be chosen after another round of judging and by votes from the public.
Contestants can submit their ideas through a Web site or in person. The Microsoft-mobile will be making stops in Atlanta, Chicago, Denver and Las Vegas.
Submissions are due at midnight Jan. 31 and will be judged on marketing approach, financial and logistic feasibility, originality and public interest.
Microsoft is using the competition to promote a new version of its Microsoft Office Accounting software and services for small businesses.
In addition to running upscale golf clubs for Trump, Kepcher appeared with Trump and real estate lawyer George Ross on “The Apprentice.” They would confer before deciding which corporate aspirant seeking a full-time job with Trump would be “fired.”
Kepcher and Trump parted ways last July, with Trump’s daughter, Ivanka, replacing her on the NBC show.

Posted Wednesday, November 29, 2006 10:40 AM by donroe | with no comments

10 Deployment Differences between Windows Xp and windows vista

You've deployed Windows XP in the past, and now you're thinking ahead to Windows Vista. Whether you'll be deploying to 10, 100, or 100,000 computers, just knowing how the process has changed from Windows XP will make the deployment run much more smoothly.

So here are 10 deployment differences between Windows® XP and Windows Vista™ that you'll be glad you discovered when it's time to make the move.

1. Windows Vista Images Are Bigger

With Windows XP and Windows 2000, it was possible to create images that would fit easily on a single CD (less than 700MB). Even organizations that added applications, drivers, and utilities to their image typically ended up with an operating system image in the 1GB to 3GB range.

With Windows Vista, image size begins at about 2GB—compressed. Once this image is deployed, the size is often around 5GB or more, and there's no way to reduce it. If you add additional applications, drivers, or other files, this image obviously grows even larger.

So how will you deploy the image? Does your network have the necessary capacity? (10MB networks or non-switched networks are not sufficient.) If you want to use CDs, how many can you deal with? You'll need three or four. DVDs (with a capacity of 4.7GB each) are now easy to create, so you can deploy using DVD drives if you have them. (If not, consider adding DVD drives when buying the next round of PCs.)

With USB memory keys growing in size (as large as 4GB or more) and shrinking in price, it would be quite easy to use one for deploying Windows Vista, since you can make a bootable key as long as the computer's BIOS supports it.

Finally (though this doesn't relate to image size), take note that there is no longer an I386 directory. Instead, all components, whether installed or not, reside in the Windows directory (although not in the standard SYSTEM32 directory). When installing a new component, the necessary files will be pulled from this location.

2. Security Is Enhanced

A number of Windows Vista security enhancements will impact deployment. For example, configuring Windows Vista to support "low rights" users, where the logged-on user does not have administrator rights, is easier. Some applications failed to work on Windows XP when users did not have administrator access because they assumed they would have full access to the C: drive and all parts of the registry. With Windows Vista, applications that attempt to write to restricted areas will have those writes transparently redirected to other locations in the user's profile.

The second big change here is that non-administrators can load drivers. This lets users attach new devices without needing to call the help desk in tears.

The third difference you'll find is that Internet Explorer® can automatically install ActiveX® controls using elevated rights. A new service can perform these installations on the user's behalf (if, of course, the IT administrator allows this via Group Policy).

Some of you may currently be using Power User rights on Windows XP, but this really does not offer many benefits (in terms of restricting user rights) over simply granting full Administrator privileges. Because of this, the Power Users group in Windows Vista has been removed, although it can be put back if required using a separate security template that can be applied to an installation of Windows Vista.

Sometimes you will need administrator rights, but this doesn't mean you want to run with admin rights all the time. So Windows Vista adds User Access Control (UAC), which causes most user applications—even for Administrators—to run with restricted rights. For applications that require additional rights, UAC will prompt for permission, asking either for permission to run with elevated privileges or for other user credentials that can replace the logged-on users.

There are also enhancements to the firewall built into Windows Vista. The new firewall can now control both inbound and outbound traffic, while still being fully configurable via Group Policy.

Finally, BitLocker™ full-volume encryption, which is included with Windows Vista Enterprise and Ultimate, allows the entire operating system volume to be encrypted. The volume can then be read only from within Windows Vista and only when the right keys are provided, either from the computer's built-in Trusted Platform Module (TPM) 1.2 chip, a USB key, or typed into the keyboard. (Note that only TPM 1.2 or later is supported.)

3. Windows Vista Is Componentized

One of the biggest architectural changes in Windows Vista is that it is now a completely componentized operating system. This affects deployment in the following ways.

Configuring which Windows Vista features should be installed requires configuring the components to be enabled. New tools, like the Windows System Image Manager, shown in Figure 1, assist with this.

Security updates, language packs, and service packs are simply components. Tools such as Package Manager (PKGMGR) can be used to apply these to Windows Vista.

In addition, all servicing can be performed offline or online. You can even apply changes to Windows Vista or a Windows Vista image when Windows Vista is not currently running. This is ideal for deployments: the operating system can be patched before it boots onto your network for the first time.

Drivers are also treated as components, so they can be added and removed easily—even offline. This means you can add drivers to existing images, even just-in-time (as the machine boots for the first time) during the deployment process. And this applies to mass-storage drivers as well; no longer do you need to create a new image just to add a new mass storage driver.

Windows Vista exposes more settings, with most components providing configurable options, so it's easier to set installation defaults that can be managed on an ongoing basis using Group Policy. For a rundown of new tools in Windows Vista, see the sidebar "Tools You Need; Tools to Forget."

Tools You Need; Tools to Forget

Here’s a rundown of the tools you’ll be using when you roll out Windows Vista, followed by a list of the tools you can retire for good once Windows Vista arrives.

USE THESE:

  • SYSPREP This is the updated version, modified for Windows Vista.
  • SETUP A new installation tool for Windows Vista, replaces WINNT and WINNT32.
  • IMAGEX The new command-line tool for creating WIM images.
  • Windows System Image Manager A tool for creating and modifying unattend.xml files.
  • PEIMG The tool for customizing Windows PE 2.0 images.
  • Windows Deployment Services The new version of RIS, which adds the ability to deploy Windows Vista and Windows XP images, as well as Windows PE 2.0 boot images.
  • PNPUTIL This is the new tool for adding and removing drivers from the Windows Vista driver store.
  • PKGMGR Also new, this Windows Vista tool is used for servicing the operating system.
  • OCSETUP This replaces SYSOCMGR and is used for installing Windows components.
  • BCDEDIT A new Windows Vista tool for editing boot configuration data.
  • Application Compatibility Toolkit 5.0 This updated tool lets you assess whether your applications are compatible with Windows Vista.
  • User State Migration Tool 3.0 An updated tool for capturing and restoring user state, supports Windows XP and Windows Vista, as well as all versions of Office including 2007.
  • BitLocker The full-volume drive encryption capability included in Windows Vista Enterprise and Ultimate editions.

FORGET THESE:

  • Remote Installation Services RIS has been replaced by Windows Deployment Services (WDS) but still offers legacy support on Windows Server 2003; RIPREP and RISETUP are not possible with Windows Vista.
  • Setup Manager/Notepad Use Windows System Image Manager instead for editing unattended setup configuration files.
  • WINNT.EXE and WINNT32.EXE Use SETUP instead.
  • SYSOCMGR Replaced by OCSETUP, PKGMGR.
  • MS-DOS Boot Floppies Forget them. Use Windows PE!

4. Text-Mode Installation Is Gone

The basic process used to install Windows XP has been unchanged since the earliest days of Windows NT®. This time-consuming procedure involved an initial text-mode installation step in which every operating system file was decompressed and installed, all registry entries were created, and all security was applied. Now with Windows Vista, this text-mode installation phase is completely gone. Instead, a new setup program performs the installation, applying a Windows Vista image to a computer.

Once this image is applied, it needs to be customized for the computer. This customization takes the place of what was called mini-setup in Windows XP and Windows 2000. The purpose is the same: the operating system picks the necessary settings and personality for the specific computer it was deployed to.

The image preparation process has also changed. With Windows XP, you would "Sysprep" a machine to prepare the reference operating system for deployment. With Windows Vista, you'll still run Sysprep.exe (installed by default in C:\Windows\System32\Sysprep), which will "generalize" the machine for duplication.

Windows Vista (any version) is provided on the DVD as an already-installed, generalized (Sysprepped) image, ready to deploy to any machine. Some customers may choose to deploy this image as-is (possibly injecting fixes or drivers using the servicing capabilities described earlier).

5. Boot.ini Is History

That's right, the Boot.ini file is not used in Windows Vista or in the new Windows PE 2.0. Instead, a new boot loader, bootmgr, reads boot configuration data from a special file named BCD. A brand new tool called bcdedit.exe (or a separate Windows Management Instrumentation or WMI provider) is used to maintain the contents of the BCD. A Windows PE 2.0 boot image can be configured in BCD too, making it easy to boot into either Windows Vista or Windows PE without making any other changes to the machine. This flexibility can be useful in recovery or maintenance scenarios.

6. Settings Are Configured in XML

With Windows XP (and previous versions of Windows PE) configuration information was stored in various text files. These text files have been replaced with an XML file.

Unattend.txt, which was used to configure how Windows XP is installed, has been replaced by unattend.xml. Unattend.xml also replaces three other files:

  • Sysprep.inf, which was used to configure how a Windows XP image is customized when deployed to a machine using a mini-setup.
  • Wimbom.ini, which was used to configure Windows PE.
  • Cmdlines.txt, which was used to specify a list of commands to execute during mini-setup.

An example of unattend.xml can be downloaded from TechNet Magazine at microsoft.com/technet/technetmag/code06.aspx.

You may still use separate files if you want, though. You don't need to put all configuration items in a single unattend.xml file. The high-level schema of the new XML configuration file is well defined, with each phase of the deployment process represented. The actual configuration items are specified on the appropriate operating system components and these items are dynamically discovered from the components themselves.

With Windows XP, most IT professionals used Notepad to edit the various configuration files. You can still do that, but the Windows System Image Manager tool I discussed earlier can be used to inspect the Windows Vista image, determine what settings are available, and allow you to configure each one.

Another tool to aid deployment is the User State Migration Tool (USMT) 3.0, which is expected to be released at the same time as Windows Vista. It will also use XML configuration files in place of the .inf files that were used in previous versions. See "Migrating to Windows Vista Through the User State Migration Tool" for more information.

7. No More HAL Complications

With Windows XP, technical restrictions prevented the creation of a single image that could be deployed to all computers. Different hardware abstraction layers (HALs) meant you had to maintain multiple images. (For more on this see the Knowledge Base article "HAL options after Windows XP or Windows Server 2003 Setup") Most organizations needed two or three images per platform (x86 and x64) and some chose to have even more—though each image brings added costs and complexity.

In Windows Vista, those technical restrictions are gone; the operating system is able to detect which HAL is required and automatically install it.

8. Windows PE Rules

Windows PE 2.0, the new version that will be released with Windows Vista, is a key part of the deployment process. Even the standard DVD-based installation of Windows Vista uses Windows PE 2.0, and most organizations will be using it (often customized for the organization's specific needs) as part of their deployment processes.

Compared to MS-DOS®-based deployment, Windows PE 2.0 brings numerous benefits, including less time spent trying to find 16-bit real-mode drivers. (It's not even possible to find these any more for some newer network cards and mass storage adapters.) Better performance from 32-bit and 64-bit networking stacks and tools, as well as large memory support are also advantages. And don't forget support for tools such as Windows Scripting Host, VBScript, and hypertext applications.

Windows PE has been available for a few years (the latest version, Windows PE 2005, was released at the same time as Windows XP SP2 and Windows Server 2003 SP1), but not all organizations could use it; it required that you have Software Assurance on your Windows desktop operating system licenses. With Windows PE 2.0, that's no longer the case. All organizations will be able to download Windows PE 2.0 from microsoft.com and use it freely for the purposes of deploying licensed copies of Windows Vista.

Like Windows Vista itself, Windows PE 2.0 is provided as an image that is componentized and can be serviced both online and off. As with Windows PE 2005, several optional components can be added, although Windows PE 2.0 includes some new ones: MSXML 3.0, Windows Recovery Environment, language packs, font packs, and so on. New tools like peimg.exe are provided for servicing Windows PE 2.0. Peimg.exe can also be used for adding drivers—including mass storage devices, which no longer require any special handling.

For more information on Windows PE 2.0, see Wes Miller's article in this issue of TechNet Magazine.

9. It's All about Images

With Windows XP, some companies used the image creation capabilities of the Systems Management Server (SMS) 2003 OS Deployment Feature Pack or third-party image creation tools. There was no generic image creation tool available from Microsoft. That's changed with Windows Vista: new tools have been created to support the Windows Imaging (WIM) file format. Unlike many other image formats, WIM images are file-based, enabling them to be applied to an existing partition non-destructively. This has great advantages in deployment processes, since user state can be saved locally instead of on a network server, eliminating what is frequently the largest source of network traffic during a deployment.

Because WIM files are file-based images, they (obviously) are not sector-based, so there are no issues around different-sized disks or partitions. A WIM image contains only the contents of a single disk volume or partition, so if you have multiple partitions to capture, you create a separate image for each one. But each of these images can be stored in the same WIM file, since the WIM file format supports multiple images per file.

The WIM file format also supports single-instance storage, so duplicate files (even from different images) are automatically removed. Between this and the advanced compression techniques employed, WIM images are typically smaller than images created by other tools. However, because of the extra processing, they do take longer to create. This size versus performance trade-off is fair enough; since you typically capture the image only once and then deploy it many times, the network traffic savings can be substantial.

The IMAGEX command-line tool interfaces with the lower-level WIMGAPI API (which is fully documented for use in custom tools too), and is used to create and manipulate WIM images. It also provides a mechanism for mounting a WIM image as a file system. Once mounted, the image can be read and modified using standard Windows tools since it looks like a normal removable media drive. This facility opens up whole new servicing opportunities.

10. Deployment Is Language-Neutral

Windows XP supported different languages in two ways. You could either deploy localized versions of Windows XP, requiring a different image for each language, or you could deploy an English Multilanguage User Interface (MUI) version with added language packs. There were advantages and disadvantages to each approach, but in most cases organizations that needed to support multiple languages took the MUI route, dealing with the limitations of running with an operating system that was effectively English at its core. Organizations that worked only with one language typically chose to use only the localized versions.

Now with Windows Vista, the entire operating system is language-neutral. One or more language packs are added to this language-neutral core to create the image that is deployed (although only some versions of Windows Vista support multiple languages).

Servicing of Windows Vista is also language-neutral, so in many cases only one security update is needed for all languages. And configuration is language-neutral, so one unattend.xml can be used for all languages.

Help Is Available

The changes I've described mean that the image creation and deployment processes you've been using for Windows XP will need to be updated. In some cases, these updates might be minor; in others (such as an MS-DOS-based process using cmdlines.txt), significant changes may be required. To help, Microsoft has created new tools, guidance, and step-by-step procedures. These are included in the Solution Accelerator for Business Desktop Deployment (BDD) 2007.

BDD 2007 breaks down the deployment process into more manageable pieces, with different teams managing each component. Guidance, checklists, and tools are provided for each team to help with the tasks they need to perform.

BDD 2007 is currently available for download from connect.microsoft.com after you sign up for the open beta program. Contained in the download are all the required Windows Vista deployment tools, including Windows PE 2.0, ImageX, Windows System Image Manager, and USMT 3.0, along with documentation explaining how to use them in an end-to-end process. The final version of BDD 2007 will be released at about the same time as Windows Vista.


The goal of BDD 2007 is simplification. Even if you don't have an existing image creation and deployment process, you should be able to use BDD to set one up quickly. Two deployment methods are provided:

  • Lite Touch, which was completely rewritten, requires user interaction to start deployment. It doesn't require any special infrastructure although it can utilize Windows Deployment Services, the next version of Remote Installation Service (RIS).
  • Zero Touch, which requires no user intervention, is layered on top of the SMS 2003 OS Deployment Feature Pack.

The new features in BDD 2007 include driver repository and injection, full computer backup processing, integration of all the Windows Vista deployment tools, and more. BDD 2007 will include all the source code for all of its automation tools, so you can modify it to meet your specific needs or copy and paste it into your own solutions. The source code is provided without restriction.

For more information on BDD 2007, see the TechNet Desktop Deployment center.


Michael Niehaus Michael Niehaus is a Systems Design Engineer in the Core Infrastructure Solutions group at Microsoft. He is responsible for developing best practices, tools, and scripts for Business Desktop Deployment. Reach him at michael.niehaus@microsoft.com.

Posted Monday, November 27, 2006 9:39 PM by donroe | 31 comment(s)

learn and win with Windows vista 101

 

Windows Vista 101 will provide you with an overview of Windows Vista. Upon completion, you're qualified to enter the Windows Vista 101 Sweepstakes. You can win great prizes like media players, digital cameras, and even one of the new Ultra-Mobile PCs. To get started, sign in using your Microsoft Partner Program, Windows Live ID, or Passport account and then select the partner category that best describes your business.

After sign-in, you will also have access to many more Windows Vista resources to help your business get ready for this exciting launch.

Posted Friday, November 10, 2006 11:12 AM by donroe | 1 comment(s)

Windows vista availability

Microsoft announced today that Windows Vista will be broadly available as a stand-alone product or pre-installed on new PCs on January 30, 2007.

Windows Vista will be made available to Volume License customers later in the month of November 2006.

  • Get ready for Windows Vista now.
  • Learn more about the different editions of Windows Vista.
  • Learn more about the features of Windows Vista.

Don Roessler

Posted Wednesday, November 08, 2006 2:40 PM by donroe | with no comments

2007 Microsoft Office System is Golden

2007 Office system released to manufacturers; the company looks ahead to worldwide business availability.

Office Online Web site

REDMOND, Wash. — Nov. 6, 2006 — Microsoft Corp. today announced the completion of the 2007 Microsoft® Office system code and confirmed its release to manufacturing (RTM). This gold code milestone concludes the largest Microsoft Office beta program to date, with more than 3.5 million people downloading Beta 2. The unprecedented quantity of feedback from beta testers and customers helped the Office development team effectively validate product quality and optimize performance. Microsoft Office RTM also marks a critical step toward worldwide business availability of the 2007 Office system, Windows Vista™ operating system and Exchange Server 2007 on Nov. 30, 2006. To underscore the significance of this new day for business, Microsoft executives will participate in events around the globe, including an event with Microsoft CEO Steve Ballmer in New York. General availability of the products will follow in early 2007.

“We’ve crossed the development finish line, and the team deserves to celebrate,” said Jeff Raikes, president of the Microsoft Business Division. “The 2007 Microsoft Office system RTM completes the most significant improvements to the products in more than a decade. It’s rewarding to be able to send this release off to our customers and help them take the next big leap forward in productivity.”

Today’s RTM begins the delivery of new tools and resources that will allow customers to learn about, try and buy the next release of Microsoft Office:

Learn. Microsoft Office Online has been redesigned to help people learn about what’s new in the 2007 Microsoft Office system. Through the new enhancements, information workers can easily determine which products are best for their needs and find related productivity resources — whether it is assistance from one of the nearly 50,000 new help articles, a how-to refresher through one of the 35 new demos, online training through any of the 24 new courses, downloading one of the more than 400 new templates, or accessing other product downloads and tools.

Try. Starting Dec. 1 in the U.S. and Canada, and coming soon after to an additional 13 international markets,* Microsoft will make available free, downloadable product trials via Office Online. Expanding on the Online Test Drive already available today, the trials will allow people to try the new desktop programs before they decide to buy or upgrade to the 2007 release.

Buy. To support purchase and adoption, the 2007 release of Microsoft Office includes the largest investment in deployment and management tools in the product’s history. IT professionals can significantly reduce the cost and complexity of desktop deployments and upgrades by utilizing resources such as the Office Migration Planning Manager, Open XML Formats Conversion Toolkit, the Business Desktop Deployment 2007 Solution Accelerator, the Office Resource Kit, and more.

Beyond overall code quality for RTM, other notable updates include the following:

SMS Link for Office Outlook® 2007. This new service allows Outlook 2007 users to connect with friends’, families’ and colleagues’ mobile phones by using SMS text messaging. It allows people to send and receive e-mail, contacts, appointments and tasks as text messages to mobile phones.

Localization. Most desktop application products in the 2007 Office system will be comprehensively localized in 38 languages.

Multilanguage support. For the first time, 2007 Office system customers will be able to purchase individual, single-language add-on packs that enable applications and suites to instantly become bilingual. The packs add a secondary localized user interface, help files, dictionary and thesaurus.

More information about the 2007 Microsoft Office system and trying the new SMS Link service can be found by visiting the new Office Online at http://office.microsoft.com

Posted Tuesday, November 07, 2006 9:57 AM by donroe | with no comments

Microsoft/Novell Collaborate on Windows and Linux: What it means for you

Interoperability and customer choice mean greater opportunity and ease of management but, in many ways, it's "business as usual" for partners.

While the announcement about the Microsoft and Novell collaboration may make your integration projects easier, it shouldn’t change the way you sell Windows Server today. What it will mean is greater opportunity and ease of management.

Interoperability is one of the most important factors when customers consider a technology purchase. And Microsoft’s ongoing commitment to interoperability is reinforced by this announcement.

 Find up-to-date information and resources about this announcement.

The Microsoft and Novell collaboration makes your cross-platform work easier and broadens your opportunities to serve more customers. It enables you by providing:

· Greater market opportunity: This collaboration expands your addressable market, helps you accelerate the sales cycle, and opens the door to new prospects and customers — particularly in the public sector.

· Ease of management and integration: Enables you to manage customer investments across platforms, and work with a wider variety of standards on more hardware from multiple companies.

· Expanded range of offerings: Give customers greater choice and expand access and exchange of data with other software.

· Maximized customer investments: Reduce the overall cost of solutions you offer with virtualization technologies.

 What can you do to take advantage of the opportunity?

If you are exploring virtualization, interoperability, and management solutions as a business practice, you can find several readiness resources today, with more training available in the coming months.

Additional partner readiness resources for interoperability of Novell SUSE Linux and Windows are in development.

Posted Saturday, November 04, 2006 9:43 AM by donroe | with no comments

Windows desktop search add-ins

Desktop Search

Add-ins for Microsoft Windows Desktop Search allow indexing of even more file types and once they are downloaded, your computer automatically detects them. New file types begin indexing as soon as they are downloaded.

As requested by our partners in the Toledo area...here is the link to desktop search Add-Ins.

http://www.microsoft.com/windows/desktopsearch/search/wdsaddins.mspx

Posted Friday, November 03, 2006 4:02 PM by donroe | 2 comment(s)

You wanted the location of that Funny Video...here it is.

Many of the partners that attended my event in Livonia, Michigan and in Toledo ohio requested the link to view the funny video that I played after our first break.  Weel, as promised, here you go....

WSYP Project: leverage customer feedback for software quality

http://www.microsoft.com/uk/technet/itsshowtime/sessionh.aspx?videoid=9999

Posted Friday, November 03, 2006 3:55 PM by donroe | with no comments

The Windows Vista SKU plan

Because different kinds of computer users need different features in their operating system, Microsoft offers multiple editions of Windows Vista, or retail "SKUs," each oriented to the needs of specific types of customers.

The Windows Vista SKU plan is optimized around key audiences—consumers, small businesses and medium and large organizations—and usage scenarios within each of these segments. The main goal of the Windows Vista lineup is to more closely align the product offerings with customer demand, rather than forcing customers to make tradeoffs between functionality and form factors. Now, for each major customer segment—consumer, small business, and medium and large business—there is at least one entry-level edition and a premium edition.

Consumer SKUs


Windows Vista Home Basic

Windows Vista Home Basic is the entry level offering for consumers. Highlights include:

  • Significant advances in security and reliability
  • Parental Controls
  • Windows Vista Basic user interface
  • Search and organize innovations
  • Improved networking

Windows Vista Home Basic is designed to be easy to set up, to help people use their PCs securely and reliably, to help people stay better connected, and like all of the editions of Windows Vista, to be compatible with the widest range of software, devices, and services people use and trust. For people who simply want to use their PC for tasks such as surfing the Internet, corresponding with friends and family using e-mail or performing basic document creation and editing tasks, Windows Vista Home Basic will deliver a safer, more reliable, and more effective computing environment.

Windows Vista Home Premium

Windows Vista Home Premium is the mainstream edition of Windows Vista for consumer desktop and mobile PCs. It includes all features available in Windows Vista Home Basic plus:

  • Windows Aero™ user interface
  • Windows Media Center functionality
  • Additional digital media features such as authoring and burning DVDs
  • Windows Tablet and Touch Technology
  • Additional mobility features such as the Windows Mobility Center

Windows Vista Home Premium makes finding information, staying connected, and interacting with your PC easier and more secure. Using, organizing and sharing photos, video, TV and music becomes a part of your everyday life. With Windows Vista Home Premium, balancing your checkbook, doing homework, watching a movie, listening to music or playing a game is a better and more enjoyable experience.

Windows Vista Ultimate

Windows Vista Ultimate is the flagship edition of Windows Vista for consumer and small business desktop PCs and mobile PCs. The primary user of Windows Vista Ultimate is the individual, such as a small-business owner who uses a single PC for both home and work activities. This edition includes all of the features available in Windows Vista Home Premium and Windows Vista Enterprise.

Windows Vista Ultimate is the first operating system that combines the advanced infrastructure of a business-focused operating system, the productivity of a mobility-focused operating system, and the digital entertainment features of a consumer-focused operating system. For the person who wants their PC to be great for working at home, on the go and at the office, Windows Vista Ultimate is the no-compromise operating system that provides it all.

Business SKUs


Vista Business Logo

Windows Vista Business is the primary edition of Windows Vista for business desktop and mobile PCs. This offering spans the small business, midsized business, and enterprise segments. This edition includes all of the features available in Windows Vista Home Basic (with the exception of a small number of entertainment features), plus:

  • Windows Aero user interface
  • Windows Tablet and Touch Technology
  • Additional mobility features such as the Windows Mobility Center and
    Windows Meeting Space
  • Core business features such as Domain Join, Group Policy support and
    Encrypting File System
  • Small business-specific features such as Windows Fax and Scan, and
    Small Business Resources

For small businesses, Windows Vista Business will help keep PCs running smoothly and securely, with less reliance on dedicated IT support. For larger organizations, Windows Vista Business provides dramatic new infrastructure improvements, enabling IT staff to spend more time adding strategic value to the business. Windows Vista Business also offers powerful new ways to organize, find, and share information, while helping people stay better connected with a mobile PC whether in the office or on the road.

Windows Vista Enterprise

Windows Vista Enterprise is the premium edition of Windows Vista for business desktop and mobile PCs. This offering is only available to customers who have their PCs covered by a Microsoft Software Assurance agreement. In addition to including all of the features available in Windows Vista Business, highlights of this edition include:

  • Windows BitLocker Drive Encryption
  • All worldwide user-interface languages
  • Virtual PC Express
  • Subsystem for UNIX Applications (SUA)

Windows Vista Enterprise is designed for large enterprises and organizations with complex desktop infrastructures. It helps reduce the cost and complexity of deploying and managing PCs, improves reliability and security, and makes it easier to comply with information policies. Windows Vista Enterprise also increases information worker productivity and enables mobile users to stay better connected with customers, partners, and their businesses in the office or on the road.

Posted Friday, November 03, 2006 3:44 PM by donroe | 3 comment(s)

Top 10 Things to Try with Windows Vista RC1

Here are just a few of the top things you can do to evaluate Windows Vista RC1 for your organization, plan your deployment, and make yourself more productive. If you have been awaiting a release candidate to start your testing, that time is now.

1.

Plan an Easier Deployment: Get the Business Desktop Deployment (BDD 2007) RC1 and install the latest deployment tools and guidance on deploying Windows Vista and the 2007 Office system. In addition, you can use this step-by-step guide to familiarize yourself with some of the major tools and technologies to help you with deployments. Our guidance will show you how to build an image using ImageX, configure it, and create an unattend.xml file using the Windows System Image Manager. Then, configure Windows Deployment Services to deploy the customized image to test machines in your organization. Explore the full range of innovations we've developed to make deployment simpler, including updating an image in an offline state and customizing the Windows preinstallation environment.

To get the BDD 2007 RC1, go to connect.microsoft.com, click on "My Participation," and sign in with your Passport ID. Once you are signed in, click on the link to available connections. Scroll down the page until you see the Business Desktop Deployment 2007 link.

2.

Improve Security and Compliance: Encrypt your drive using BitLocker drive encryption. Take advantage of User Account Control and deploy a test group as standard users and see how much easier they are to support. Apply group policy settings that prevent data transfers to removable media like flash drives and CD-Rs. Run as a standard user on your own PC. On Windows Vista, everyday activities like browsing the Web with Internet Explorer 7 will be more secure because of the built-in anti-phishing filter and Protected Mode.

3.

Manage Your PC: Explore more than 500 new group policies to see everything you can manage centrally. New policies include the ability to control installation of devices and power management settings, which can help you save energy costs on each PC. Use the Event Viewer to get a consolidated view of all of the events on your system. (Just type "Event Viewer" in the Quick Search menu to bring it up.) You can right-click any event to schedule a task that will start automatically the next time that event happens.

4.

Optimize Your Network: Restrict authorized use of the network by configure the new outbound blocking capabilities of the Windows Firewall. You can use the same integrated MMC Firewall snap-in to configure server and domain isolation using IPSec. See how Quality of Service policies can help you manage the use of precious bandwidth and define the priority of traffic for applications. If you ever have trouble connecting to a network, just right-click on the connection icon in your system tray and choose "Diagnose." Windows Vista will help you identify the problem and guide you through the solution.

5.

Test Your Applications: Download and use the Microsoft Application Compatibility Toolkit 5.0 Beta. Take inventory of the applications in your environment, record any issues you find, and synchronize your findings with other testers using the Microsoft Compatibility Exchange. The tool will also find issues with Web sites you are visiting and applications that may not work well for standard users.

6.

Be More Productive: With the Windows Aero user experience, the windows feature a transparent glass effect that makes it is easier to manage your open windows with less distraction. Press Windows+Tab to experience the dynamic "Flip 3D" window management feature. Use Instant Search, which is built right into the Start menu to easily find your documents, e-mails, Web sites, and even applications. Insert a ReadyBoost-capable storage device, such as a USB 2.0 memory drive with at least 512 MB capacity. When prompted, click "Speed up my system" to get an extra boost of performance.

7.

Go Mobile: Windows Vista is designed to work especially well on mobile hardware, so install it on your laptop or Tablet PC, too. Press Windows+X to start the Windows Mobility Center, which puts the most frequently used mobile PC settings in a single location. With the Sync Center, it is easy to keep your files, data, and devices in sync and move seamlessly between online and offline states. You can also configure Folder Redirection so roaming users can access any folder, not just the five that could be roamed in Windows XP. If you are using a Tablet PC, you'll notice that improved handwriting recognition, cursors, visual feedback, and new Pen Flicks will make it even easier to use.

8.

Share Information and Collaborate: Try Windows Meeting Space (called Windows Collaboration in Beta 2) to collaborate with a co-worker who is also using Windows Vista. You can share your screen with others and take turns working on a file. Use Microsoft's new read-only XML-Paper Specification (XPS) archival file format to store and share documents in a more secure way. To create an XPS document, simply print it and chose "Microsoft XPS Document Writer" as the printer. You can share the XPS document with other Windows Vista users or with Windows XP users who have installed the .NET 3.0 beta.

9.

Use the Web More Effectively: With Internet Explorer 7 on Windows Vista, you can browse the Web more easily and securely. Right-click a link and chose "Open in New Tab" to experience the new tabbed browsing. Press Ctrl+Q to open the Quick Tabs (thumbnail view) of all your open tabs. Even printing is improved—select “Shrink to Fit” printing and the sides of your Web pages won't be cut off. You can use the built-in RSS reader to subscribe to the Windows Vista Blog or other feeds to get the latest information.

10.

Join the Community: Share your experiences in a blog, get and give help to other users, and report critical bugs—there are a number of ways you can interact with others around the world who are using Windows Vista. TechNet offers managed forums where you can ask questions and get support from your peers. On your Windows Vista desktop, you will also find links to download a bug-reporting tool and to provide feedback to Microsoft.

While you are evaluating Windows Vista RC1, you can try the latest Microsoft Office 2007 Beta release at the same time to see how they work better together. Learn more about Office 2007 Beta 2 and how you can get it.

Posted Friday, November 03, 2006 3:38 PM by donroe | with no comments

Learn and win with Windows Vista 101

Learn and win with Windows Vista 101

Windows Vista 101 will provide you with an overview of Windows Vista. Upon completion, you're qualified to enter the Windows Vista 101 Sweepstakes. You can win great prizes like media players, digital cameras, and even one of the new Ultra-Mobile PCs. To get started, sign in using your Microsoft Partner Program, Windows Live ID, or Passport account and then select the partner category that best describes your business.

After sign-in, you will also have access to many more Windows Vista resources to help your business get ready for this exciting launch.

Posted Friday, November 03, 2006 3:30 PM by donroe | with no comments

Microsoft backtracks on Vista transfer limits

Microsoft backtracks on Vista transfer limits

Amid outcry from tech enthusiasts, Microsoft says it will allow retail Windows buyers unlimited license transfers to a different PC.

By Ina Fried
Staff Writer, CNET News.com

Published: November 2, 2006, 11:00 AM PST

REDMOND, Wash.--Reversing a licensing change announced two weeks ago, Microsoft said on Thursday that it will not limit the number of times that retail customers can transfer their Windows Vista license to a different computer.

On Oct. 16, Microsoft issued the new user license for Vista, including terms that would have limited the ability of those who buy a boxed copy of the operating system to transfer that license. Under the proposed terms, users could have made such a switch only one time.

However, the new restriction prompted an outcry among hardware enthusiasts and others. Microsoft is returning the licensing terms to basically what they were in Windows XP--users can transfer their license to a new PC an unlimited number of times, provided they uninstall and stop using it on the prior machine.

The software maker said it paid attention to the response both directly to the company and on blogs and decided to reverse course. Microsoft had hoped to use the change to aid its ongoing efforts to thwart piracy.

"We're trying to be really clear about our intention to prevent piracy," said Microsoft product manager Mike Burk. "At the same time, after listening to the feedback that came in, (we) felt that we needed to make this change."

By reversing course, Burk said, Microsoft hoped to assuage users' concerns, particularly those of hobbyists who frequently upgrade the components of their PC, in some cases triggering Windows to consider the machine a new PC.

Now on News.com:
From CNET Reviews:

    Best of CES 2007 Awards

    CNET Reviews is gearing up to host the 2007 Best of CES Awards to recognize top new products at the show in 10 categories. The awards are open to exhibitors at CES 2007; submissions must be received by Dec. 1.

    Submit now

The plan to limit transfers was part of a series of changes to the terms that apply to boxed copies of Vista, not to the license that comes on a new, Vista-equipped PC. Separate rules apply for the versions of Windows installed on new PCs, which is how the majority of buyers get their copy of Windows. Typically, copies of Windows purchased on a new PC cannot legally be transferred to another PC.

Burk said that Microsoft isn't planning to back off any of its other planned licensing changes, including a move related to virtualization, in which a computer runs multiple operating systems, or multiple copies of the same operating system, at the same time.

Under those new license terms, any Windows version can serve as the primary, or host, operating system. However, only the Business and Ultimate editions of Vista can run as guest operating systems in virtualization.

"We're not planning on making any other changes," Burk said. "We'll keep listening to people's feedback."

Posted Friday, November 03, 2006 1:18 PM by donroe | with no comments