Archive for Security
Q&A from the WSUS Webinar
Posted by: | CommentsHere is the Q&A panel from the September 17, 2009, WSUS webinar from Susan Bradley.
Question: Disclaimer: When running image based backup solution and/or utilizing online backup services, be sure to either create a seperate volumn for WSUS content or exclude it from off-site backup if possible.
Answer: Excellent recommendation. Thanks!
Question: Are there any problems with XP SP3? Thanks.
Answer: Globally, I”m not aware of any. Have almost all of our customers up on XP SP3. There may be individual application issues, but not that I”m aware of.
Question: XP SP3 causes problems by switching off the TS ActiveX used for RWW but that has been blogged to death!
Answer: Correct, I don”t consciously think about that because it’’s just automatic to fix. Thanks for the reminder.
Question: What is the best way to “Disable” WSUS?
Answer: Services – disable the WSUS service
Question: Is the specific service just the “Windows Update” service on the server? Are there any other ones?
Answer: That’’s the one.
Question: Is the method used to relocate WSUS content on sbs 08 the same as prior versions?
Answer: No, There is a wizard in the SBS 2008 Console to move the WSUS data to different partitions.
Question: I called some of my LOB vendors and found out that one of them does not support downloading their program’’s updates through IE8 yet. I”ve gotten into the habit of calling my main vendors or checking their FAQ before I roll anything out.
Answer: That’’s an excellent suggestion. Thanks for sharing.
Question: WSUS 3.0 SP2 needs the new reportviewer. but… the viewer needs .net 3.5. How ugly is the .net install?
Answer: Test it first, but I haven”t had too many problems when doing the 3.5 install for my sites.
Question: Do you recommend partitioning SBS08.
Answer: yes minimum 2
Question: Is there going to be a WSUS 4.0 someday?
Answer: Someday, we don”t know when
Question: Because I have installed WSUS manually I have the Not Available in the Updates. I can go to the WSUS server via 8530 and I can go to the updates page but it does not show any updates. I do have all the products checked in the list and I am not downloading drivers but I still have problems not getting the green check mark. Good point about not unistalling. I did that and it messed it up a lot
Answer: susan provided a list of items that you need to include and point to the green check/blue check SBS blog post for the answer
Question: Can you speak to the relative importance of patching Microsoft products vs. third party products like Java, Adobe, Firefox, QuickTime, etc.? The focus seems always to be on Microsoft products, but many of the threats are coming from third-party products as well. How do you handle those?
Answer: VERY important to patch the 3rd party stuff. The bad guys are choosing to come in via 3rd party becasue MS is generally updated these days.
Question: Not a question, but a praise, I highly recommend SBS08 Unleashed; and I just posted a review on Amazon.
Answer: Thanks!
Question: is there a way we can submit our WSUS policy/procedures for a slap on the back or a slap on the head?Kevin royalty warned me about the 2×4.
Answer: you can contact Susan via her blog, or submit a ticket a Third Tier
Question: Is there a place that a new MSP can go to see historically what patches have caused problems? We are developing our patch management policy and have basically an enormous amount of patches to approve or deny to “catch up”. It would be great to have a publish list of patches that a low or high risk. Any resource available that you know of to help us out?
Answer: www.patchmanagement.org, but nobody keeps a “master database” of this information
So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Get Support
Blog
Twitter
Facebook
LinkedINThird Thursday with special guest Susan Bradley
Posted by: | CommentsHope that you all had a wonderful summer! It’s September and as promised Third Tier is back to launch a new season of our Third Thursday webinar series. To kick off the new season we have Susan Bradley, SBS MVP of lore to present, in her words, WSUS and All The Gory Details.
Susan is world renown for her mastery of patching and the issues that occur. You won’t want to miss this session on how to manage WSUS and All The Gory Details.
So click the link below to block off next Thursday September 17th (Noon eastern) and we’ll see you then.
When: Thursday, Sep 17, 2009 12:00 PM (EDT)
Duration: 1:30 (presentation 1 hour, then Q&A)
Third Tier has invited you to attend an online meeting using
Microsoft Office Live Meeting.
https://www.livemeeting.com/cc/mvp/join?id=7R5BRQ&role=attend&pw=M%289zFMf48
Meeting time: Sep 17, 2009 12:00 PM (EDT)
Add to my Outlook Calendar:
https://www.livemeeting.com/cc/mvp/meetingICS?id=7R5BRQ&role=attend&pw=M%289zFMf48&i=i.ics
So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Get Support
Blog
Twitter
Facebook
LinkedINBackup on shared folders running on a local system account?
Posted by: | CommentsWhile I do not advocate such workarounds as it opens up additional security loopholes, it still is a workaround. And as I usuallly say, WARNING: This is not a recommended approach. Use at your own risk
Microsoft has a documented procedure to enable null sessions shares and while the KB article mentions Windows 2000, it does work for Windows Server 2003. This should be done on the Windows machine that hosts the shared folder. A word of caution if you intend to use this approach - document every step that you do and make sure you rollback any changes made after generating your database backup. Tasks like enabling the Guest user account (this is disabled by default), modifying the registry, etc. should be rolled back as soon as you're done, otherwise, you're opening up security vulnerabilities across your network.
5 Reasons Why SMB’s Shouldn’t Ignore Security
Posted by: | CommentsI wrote a very short 5 reasons why your clients shouldn’t ignore security. It really only takes 1 reason to make it all worth while.
5 Reasons to not Ignore Security
—
So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Get Support
Blog
Twitter
Facebook
LinkedIN
Excel Security Update Applies to Mac Office, Too
Posted by: | CommentsMicrosoft released a couple of updates for their Excel spreadsheet product in the slate of monthly updates for April 2009. The security issues addressed in the update also apply to the Mac version of Excel as well. As such, Microsoft has released updates for both Office 2004 and Office 2008 for the Mac. The files can be downloaded from http://www.microsoft.com/mac/downloads.mspx. Because of the nature of the update, all Mac Office users are encouraged to install this update as soon as possible.


