Microsoft to release out-of-band security update 11/23 that impacts Windows. Exploit code must either be out there or close to it. *gulp*

So I log in with a Joe Schmoo, non-admin account to a Vista machine. In Task Manager, I go to the Processes tab and it only shows a subset of processes – not all user processes. To show process from all users, it requires administrative rights, as indicated by the button at the bottom with the UAC icon.

So instead, I go to a Command Prompt, type the command tasklist, and there’s a listing of all processes that are running from all users.

Great consistency there…

Microsoft article here

References:
Microsoft Solution Accelerator for Business Desktop Deployment 2007
Microsoft Application Compatibility Toolkit (ACT) 5.0
Windows Vista Hardware Assessment 1.0
Virtual PC 2007
Volume Activation 2.0 Tools - Windows Volume Activation Management Tool (VAMT), Key Management Service (KMS) for Windows Server 2003 SP1 and Later, and KMS Management Pack for Management Operations Manager 2005
PowerShell 1.0

I postulated the other day that, with the new Office 2007 category showing in WSUS right before Patch Tuesday, we'd been seeing the first security updates. Well, not so much. Patch Tuesday has come and gone, and while there were many Office updates, none for the 2007 version. Hummm. We also failed to receive a Vista security update.

Could it be that Microsoft actually... I dunno ... might have done something leaning towards making things more secure?

One of the most interesting items that comes with Microsoft's new operating system, Vista, is called User Account Control. Very simply stated, it forces the user of the system to specifically authorized any function that requires administrative credentials. For example, if you want to change install WEP to connect to "secure" wireless networks, you would need to put in your password, basically reaffirming this is something that could be dangerious and that you really want to do this. A geekier explaination is avaialble here from Microsoft.

This is a great theory, and many other systems have it. In *nix, there's a speciall command called sa which allows you to enter a system administration session to do system administration work, since you should never log in as root. I'm sure there will be a comment shortly from zarchasmpgmr telling me how long ago IBM implemented this within their architecture. =)

Well, Microsoft is finally joining the frey with UAC on Vista. And, in theory, this is good. However, Microsoft's implementation has been considered less than stellar by many people. The major offense is that UAC is too "chatty", asking for credentials a lot more often than people would think they should need.

To this point, I offer you this gem, brought to you by those fine people at Apple.

Paul Thurrott had an interesting rant in today's WinInfo, which I included behind the cut tag.

( Have Fun Purchasing Vista )

-----
Back to me now: There is something else that is boiling around right now. As some of you might know, there will be a change to Daylight Saving Time that will affect operating systems and other time sensative items, such as Exchange. Microsoft has their wonderful support policy in place, wherein they stop doing non-security support for items in a specified period of time, in order to focus all of their technical attention on the newer products. Will they offer the DST updates for things like Exchange 2000? Well, originally the answer was "Yes, if you are under an Extended Support Agreement and willing to pay $40,000 for the update." How about Windows 2000? Same answer. And rest assured, that is an ADDITIONAL $40,000 for the update.

Aparently, they heard enough screams from corporations, and have now changed their answer. The new answer is "Yes, you can get the DST 2007 updates for all items in Extended Support for only $4,000 total." Great news! How do I sign up? Several days and phone calls to the Technical Account Manager later, and we're told that we can wait a few days for them to set up a process to accept purchase Orders, or call Customer Service with credit card and get the updates now. Great.

After arguing with my boss, it's decided that I will use my credit card so we can get the updates quickly. So I follow the instructions on the email our TAM provided -- called the 800 number and asked for the updates. Oh, you're a Premier customer. You shouldn't be calling this number. Let me transfer you. ... Oh, you can't call up for that. The TAM has to arrange for it. *slap* I ask why, then, did the TAM send out information that said you were to be able to do this? And the answer was "Uhm, I don't know. Let me try to get a hold of your TAM." He wasn't able to, so he basically shrugged me off.

The left hand of Microsoft had no idea what the right hand was doing, and here I am, stuck in the middle waiting to pay $4,000 for updates. *sigh* Did I mention that there is only a little over five weeks until this goes into effect?

Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats

Open, edit, and save documents, workbooks, and presentations in the file formats new to Microsoft Office Word, Excel, and PowerPoint 2007.
-----------------------------------
PowerPoint Viewer 2007

Microsoft Office PowerPoint Viewer 2007 lets you view full-featured presentations created in PowerPoint 97 and later versions.
-----------------------------------
Visio 2007 Viewer

The Visio 2007 Viewer allows anyone to view Visio drawings and diagrams (created with Visio 5.0, 2000, 2002, 2003, or 2007) inside their Microsoft Internet Explorer version 5.0 or later Web browser.
-----------------------------------
Windows Vista Readiness Hands on Lab

Microsoft has put together a Hands on Lab designed to educate developers on known Microsoft Windows Vista application compatibility issues. This process will walk the developer through specifics, focusing on solutions that will enable customers running your application to have a better experience on Microsoft Windows Vista. After completing this lab, the developer should be able to determine if and how the most commonly known application compatibility issues could affect their specific application.
-----------------------------------
Windows Vista Security Guide

The Windows Vista Security Guide provides guidance and tools to further protect Windows Vista against real-live threats such as malware and information theft. This solution accelerator recommends the Enterprise Client (EC) configuration for organizations of all types. Only in extreme security situations does the guide recommend the Specialized Security – Limited Functionality (SSLF) configuration, which considerably limits client computer functionality. The Solution Accelerator includes recommendations about how to use new and enhanced security technologies in Windows Vista to better defend the client computers in your organization against malware. The guide also provides recommendations and best practices on how to use encryption and access control technologies in Windows Vista to protect corporate data. Application compatibility testing recommendations are included. This Solution Accelerator includes several files, such as the Windows Vista Security Guide.doc, the detailed Appendix A of the Windows Vista Security Guide.doc, the Windows Vista Security Guide Settings.xls, and the GPOAccelerator tool to help you easily implement the guidance.
-----------------------------------
Microsoft .NET Framework 3.0 Redistributable Package

The Microsoft .NET Framework 3.0 is the new managed code programming model for Windows®. It combines the power of the .NET Framework version 2.0 with new technologies for building applications that have visually compelling user experiences, seamless communication across technology boundaries, and the ability to support a wide range of business processes. These new technologies are Windows Presentation Foundation, Windows Communication Foundation, Windows Workflow Foundation, and Windows CardSpace. The .NET Framework 3.0 is included as part of the Windows Vista™ operating system; you can install it or uninstall it using Windows Features Control Panel. This redistributable package is for Windows XP and Windows Server 2003.

Vista released to manufacturing

Businesses are expected to be able to download Vista starting November 30, 2006. The general public release is expected for January 30, 2007.