Archive for Security

Sep
17

Q&A from the WSUS Webinar

Posted by: ThirdTier | Comments (0)

Here is the Q&A panel from the September 17, 2009, WSUS webinar from Susan Bradley.

Question: Is there a place that a new MSP can go to see historically what patches have caused problems? We are developing our patch management policy and have basically an enormous amount of patches to approve or deny to “catch up”. It would be great to have a publish list of patches that a low or high risk. Any resource available that you know of to help us out?
Answer: www.patchmanagement.org

Question: Disclaimer: When running image based backup solution and/or utilizing online backup services, be sure to either create a seperate volumn for WSUS content or exclude it from off-site backup if possible. ;-)

Answer: Excellent recommendation. Thanks!

Question: Are there any problems with XP SP3? Thanks.

Answer: Globally, I”m not aware of any. Have almost all of our customers up on XP SP3. There may be individual application issues, but not that I”m aware of.

Question: XP SP3 causes problems by switching off the TS ActiveX used for RWW but that has been blogged to death!

Answer: Correct, I don”t consciously think about that because it’’s just automatic to fix. Thanks for the reminder. :)

Question: What is the best way to “Disable” WSUS?

Answer: Services – disable the WSUS service

Question: Is the specific service just the “Windows Update” service on the server? Are there any other ones?

Answer: That’’s the one.

Question: Is the method used to relocate WSUS content on sbs 08 the same as prior versions?

Answer: No, There is a wizard in the SBS 2008 Console to move the WSUS data to different partitions.

Question: I called some of my LOB vendors and found out that one of them does not support downloading their program’’s updates through IE8 yet. I”ve gotten into the habit of calling my main vendors or checking their FAQ before I roll anything out.

Answer: That’’s an excellent suggestion. Thanks for sharing.

Question: WSUS 3.0 SP2 needs the new reportviewer. but… the viewer needs .net 3.5. How ugly is the .net install?

Answer: Test it first, but I haven”t had too many problems when doing the 3.5 install for my sites.

Question: Do you recommend partitioning SBS08.

Answer: yes minimum 2

Question: Is there going to be a WSUS 4.0 someday?

Answer: Someday, we don”t know when

Question: Because I have installed WSUS manually I have the Not Available in the Updates. I can go to the WSUS server via 8530 and I can go to the updates page but it does not show any updates. I do have all the products checked in the list and I am not downloading drivers but I still have problems not getting the green check mark. Good point about not unistalling. I did that and it messed it up a lot

Answer: susan provided a list of items that you need to include and point to the green check/blue check SBS blog post for the answer

Question: Can you speak to the relative importance of patching Microsoft products vs. third party products like Java, Adobe, Firefox, QuickTime, etc.? The focus seems always to be on Microsoft products, but many of the threats are coming from third-party products as well. How do you handle those?

Answer: VERY important to patch the 3rd party stuff. The bad guys are choosing to come in via 3rd party becasue MS is generally updated these days.

Question: Not a question, but a praise, I highly recommend SBS08 Unleashed; and I just posted a review on Amazon.

Answer: Thanks!

Question: is there a way we can submit our WSUS policy/procedures for a slap on the back or a slap on the head?Kevin royalty warned me about the 2×4.

Answer: you can contact Susan via her blog, or submit a ticket a Third Tier

Question: Is there a place that a new MSP can go to see historically what patches have caused problems? We are developing our patch management policy and have basically an enormous amount of patches to approve or deny to “catch up”. It would be great to have a publish list of patches that a low or high risk. Any resource available that you know of to help us out?

Answer: www.patchmanagement.org, but nobody keeps a “master database” of this information

---
So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN
Categories : Q&A, Security, Webinar
Comments (0)

Hope that you all had a wonderful summer! It’s September and as promised Third Tier is back to launch a new season of our Third Thursday webinar series. To kick off the new season we have Susan Bradley, SBS MVP of lore to present, in her words, WSUS and All The Gory Details.

Susan is world renown for her mastery of patching and the issues that occur. You won’t want to miss this session on how to manage WSUS and All The Gory Details.

So click the link below to block off next Thursday September 17th (Noon eastern) and we’ll see you then.

When: Thursday, Sep 17, 2009 12:00 PM (EDT)

Duration: 1:30 (presentation 1 hour, then Q&A)

Third Tier has invited you to attend an online meeting using

Microsoft Office Live Meeting.

https://www.livemeeting.com/cc/mvp/join?id=7R5BRQ&role=attend&pw=M%289zFMf48

Meeting time: Sep 17, 2009 12:00 PM (EDT) 

Add to my Outlook Calendar:

https://www.livemeeting.com/cc/mvp/meetingICS?id=7R5BRQ&role=attend&pw=M%289zFMf48&i=i.ics

---
So who wrote this blog and what do they do for a living anyway?
We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN
Categories : SBS 2008, Security, Webinar
Comments (0)
I still see a lot of SQL Servers running using the LocalSystem account, particularly, MSDE 2000, which is very popular among third-party applications that requires storing data in a database. Others run a stand-alone SQL Server system and use LocalSystem account for the service accounts. While this may be a security risk, a lot of users still have them configured. And when they need to generate database backups on a shared folder, the SQL Server service's attempt to connect to network resources are denied access because they have no credentials and they are using a null session.Of course, a typical recommendation would be to change the service account to a local Windows or a domain account with least privilege but not everybody is open to that suggestion. So how do you allow SQL Server to generate a backup on a shared folder while using a LocalSystem account? The solution: enable null session shares

While I do not advocate such workarounds as it opens up additional security loopholes, it still is a workaround. And as I usuallly say,
WARNING: This is not a recommended approach. Use at your own risk

Microsoft has a documented procedure to enable null sessions shares and while the KB article mentions Windows 2000, it does work for Windows Server 2003. This should be done on the Windows machine that hosts the shared folder. A word of caution if you intend to use this approach - document every step that you do and make sure you rollback any changes made after generating your database backup. Tasks like enabling the Guest user account (this is disabled by default), modifying the registry, etc. should be rolled back as soon as you're done, otherwise, you're opening up security vulnerabilities across your network.
Comments Comments Off

I wrote a very short 5 reasons why your clients shouldn’t ignore security. It really only takes 1 reason to make it all worth while.

5 Reasons to not Ignore Security


So who wrote this blog and what do they do for a living anyway?

We’re Third Tier. We provide advanced Third Tier support for IT Professionals.
Third Tier Get Support BlogFeed Blog Twitter Twitter Facebook Facebook LinkedIn LinkedIN

Categories : Amy Babinchak, Security
Comments (0)
Apr
15

Excel Security Update Applies to Mac Office, Too

Posted by: Eriq Neale | Comments Comments Off

Microsoft released a couple of updates for their Excel spreadsheet product in the slate of monthly updates for April 2009. The security issues addressed in the update also apply to the Mac version of Excel as well. As such, Microsoft has released updates for both Office 2004 and Office 2008 for the Mac. The files can be downloaded from  http://www.microsoft.com/mac/downloads.mspx. Because of the nature of the update, all Mac Office users are encouraged to install this update as soon as possible.

Categories : Eriq Neale, Security
Comments Comments Off

SBS 2008 Unleashed

Image of Windows Small Business Server 2008 Unleashed

SBS 2003 Unleashed

Image of Microsoft Small Business Server 2003 Unleashed

Partners