Thursday, June 11, 2009

Microsoft Security Newsletter - Volume 6, Issue 6

Microsoft Security Newsletter
Welcome to the Microsoft Security Newsletter - a monthly newsletter for IT professionals and developers bringing security news, guidance, updates, and community resources direct to your inbox. To view an online version of this newsletter, please click here. If you would like to receive less technical security news, guidance and updates, please subscribe to the Microsoft Security for Home Computer Users Newsletter.

Want to receive more frequent updates on news and featured resources? Subscribe to the Featured Security and Privacy Content RSS feed. Have an idea for a future article, or looking for guidance around a specific topic that you have not seen in this newsletter (or on TechNet or MSDN)? E-mail secaware@microsoft.com.
Security Viewpoint
By Gina Narkunas, Director – IE8 Product Marketing, Microsoft Corporation
Gain insight into the rapid evolution of Web-based threats and learn more about how the new security and privacy protections in Internet Explorer 8 can benefit your organization.

Top Stories
Microsoft Codename "Geneva" Beta 2 is an open platform that provides simplified user access and single sign-on for on-premises and cloud-based applications in the enterprise, across organizations and on the Web. Download Beta 2 today and learn more about "Geneva" at www.microsoft.com/geneva.
Find out what you want to know about identity and access control. From weekly interviews with product team members and developer how-tos to news and key resources, this new site offers content for identity experts and those just getting started. Don't forget to also download the Identity Developer Training Kit.
Learn about the Business Productivity Online Suite—a set of subscription-based enterprise software services that operate within a complete ecosystem of features and capabilities designed to meet and in many cases to exceed the security and availability goals that you have for your business applications.

Security Guidance
Get a quick overview of new security features in Windows 7, and changes to security features and technologies from Windows Vista.
Delve deep into the various aspects of deploying BitLocker Drive Encryption on computers running Windows 7 Enterprise or Windows 7 Ultimate from using certifications and smart cards to enabling BitLocker by using the command line.
Designed to help you become familiar with BitLocker Drive Encryption in a Windows 7 test environment, this guide details basic information and procedures you need to start configuring and deploying BitLocker in your organization.
Learn how to use the ActiveX Installer Service to manage the deployment of ActiveX controls by using Group Policy on computers in an organization.
This step-by-step guide is designed to help administrators become familiar with AppLocker by providing the instructions needed to set up AppLocker in a test lab environment. Each scenario provides basic information and procedures that administrators can use to start configuring and deploying AppLocker in their network environments.
Windows 7 gives you more control over the Security Messages and other Notifications you may or may not want to receive. Learn how, for starters, you can configure how notifications are handled on the Taskbar—choosing to hide certain types of notifications, such as Action Center messages, Network messages, Windows Update Automatic Updates messages, and so on.
Learn how to slipstream a Forefront Client Security engine update into your System Center Configuration Manager (SCCM) or script-based initial Client Security client deployment, so that you are deploying the most up to date engine.
Internet Explorer Enhanced Security Configuration places your server and Internet Explorer in a configuration that decreases the exposure of your server to potential attacks that can occur through Web content and application scripts. Learn more about this configuration and browser security best practices.

This Month's Security Bulletins
Critical:
Important:
Moderate:

Community / MVP Update
Security MVP of the Month: Debra Littlejohn Shinder   
Debra Littlejohn Shinder is a technology trainer, author, and consultant who currently co-owns TACteam (Trainers, Authors and Consultants), a company specializing in producing content, technical guidance, and training for top technology companies. She has co-authored or contributed to more than 28 technology books and has published hundreds of articles in print and online publications like TechRepublic, CNET, Windows & .NET Magazine/Windows IT Pro, and ComputerWorld.
Learn about some of the keys to keeping clients safe in this article by Microsoft Enterprise Security MVP Deb Shinder—proper configuration settings, secure application development, and the deployment of the appropriate security mechanisms based on how and where the client computer is used.

Microsoft Product Lifecycle Information
Find information about your particular products on the Microsoft Product Lifecycle Web site.
See a List of Supported Service Packs: Microsoft provides free software updates for security and non-security issues for all supported service packs.

Security Events and Training
In this Channel9 video, Principal Developer Louis Lafreniere takes you through the history and future of /GS, in a deep way, of course. Watch as he maps out exactly how /GS works and what to expect from /GS++.
Take a closer look at a variety secure messaging and collaboration solutions available through a family of Microsoft products that help protect information and control access.

Upcoming Security Webcasts
Upcoming security webcasts in a dynamic, interactive format.
For IT Professionals
TechNet Webcast: Introduction to Active Directory Rights Management Services (AD RMS) Integration with RSA Data Loss Prevention (DLP) (Level 100)
Wednesday, June 17, 2009 1:00 PM Pacific Time
David Hastie, Senior Product Manager, Microsoft Corporation
TechNet Webcast: Best Practices for Security with SQL Server 2008 and SafeNet Luna HSM Support (Level 300)
Thursday, June 18, 2009 8:00 AM Pacific Time
Skip Norton, Director Business Development, SafeNet; Robert Woodard, Senior Systems Engineer, SafeNet, and Peter DeBetta, SQL Consultant, DeBetta Software
TechNet Webcast: Protecting Sensitive Information with Rights Management Services (Level 100)
Thursday, June 18, 2009 1:00 PM Pacific Time
Cristian Mora, Technical Product Manager, Microsoft Corporation and David Hastie, Senior Product Manager, Microsoft Corporation
TechNet Webcast: Simplified Access and Single Sign-on with Microsoft Code Name "Geneva" Overview (Level 300)
Tuesday, June 23, 2009 1:00 PM Pacific Time
Cristian Mora, Technical Product Manager, Microsoft Corporation and James Galvin, Senior Product Manager, Microsoft Corporation
TechNet Webcast: Exchange 2010 Information Protection and Control (Level 300)
Monday, June 29, 2009 9:00 AM Pacific Time
Harold Wong, Senior IT Pro Evangelist, Microsoft Corporation
TechNet Webcast: Active Directory Domain Services in Windows Server 2008 R2 Technical Overview (Level 300)
Thursday, July 02, 2009 11:00 AM Pacific Time
Matthew Hester, Senior IT Pro Evangelist, Microsoft Corporation
TechNet Webcast: Connect Remotely Using Windows 7 Direct Access (Level 300)
Wednesday, July 08, 2009 10:00 AM Pacific Time
Keith Combs, Senior IT Pro Evangelist, Microsoft Corporation
TechNet Webcast: Windows Server 2008 R2 and Windows 7 Group Policy Changes (Level 300)
Tuesday, July 14, 2009 11:00 AM Pacific Time
John Baker, Senior IT Pro Evangelist, Microsoft Corporation
TechNet Webcast: Windows 7 Enhanced Security and Control (Level 300)
Wednesday, July 15, 2009 10:00 AM Pacific Time
Yung Chou, IT Pro Evangelist, Microsoft Corporation
TechNet Webcast: Information About Microsoft July Security Bulletins (Level 200)
Wednesday, July 15, 2009 11:00 AM Pacific Time
Christopher Budd, Trustworthy Computing Senior Public Relations Manager, Microsoft Corporation and Adrian Stone, Senior Security Program Manager Lead, Microsoft Corporation
For Developers
MSDN Webcast: BenkoTips Live and On Demand: Diving Deeper into Windows 7 for Developers (Level 200)
Wednesday, June 17, 2009 9:00 AM Pacific Time
Mike Benkovich, MSDN Developer Evangelist, Microsoft Corporation
MSDN Webcast: RESTful Services with WCF 3.5 SP1 (Part 2 of 2): Security and Scalability (Level 200)
Thursday, June 25, 2009 12:00 PM Pacific Time
Danilo Diaz, Developer Evangelist, Microsoft Corporation

Security Newsletter
Volume 6, No. 6

June 2009
In This Issue:
Security Viewpoint
Top Stories
Security Guidance
This Month's Security Bulletins
Community / MVP Update
Microsoft Product Lifecycle Information
Security Events and Training
Upcoming Security Webcasts
Security Program Guide
Security Awareness Materials
Guidance, samples, and templates for creating a security-awareness program in your organization.
Learn Security On the Job
Learning Paths for Security - Microsoft Training References and Resources
Upcoming Chats
Microsoft NAP with NPS Open Forum
June 25, 1:00 PM Pacific Time
View a listing of upcoming technical chats
Security Blogs
Michael Howard RSS
Eric Lippert RSS
Eric Fitzgerald RSS
Steve Lamb RSS
MSRC Blog RSS
ACE Team RSS
Windows Vista Security RSS
Solution Accelerators - Security & Compliance RSS
Kai Axford RSS
Security Vulnerability Research & Defense RSS
Security Development Lifecycle (SDL) RSS
Security Newsgroups
General Security issues/questions
Open with newsreader
Virus issues/questions
Open with newsreader
ISA Server
Open with newsreader
Window Vista: Security
Open with newsreader
SQL Server: Security
Open with newsreader
Windows Server: Security
Open with newsreader
Community Web Sites
IT Pro Security Community
Security Newsgroups
Additional Security Resources
Security Help and Support for IT Professionals
TechNet Troubleshooting and Support Page
Microsoft Security Glossary
TechNet Security Center
MSDN Security Developer Center
Sign-Up for the Microsoft Security Notification Service
Security Bulletin Search Page
Home Users: Protect Your PC
MCSE/MCSA: Security Certifications
Subscribe to TechNet
Register for TechNet Flash IT Newsletter
© 2009 Microsoft Corporation. All rights reserved. Microsoft, MSDN, Windows, Windows NT, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

To cancel your subscription to this newsletter, reply to this message with the word UNSUBSCRIBE in the Subject line. You can also unsubscribe at http://www.microsoft.com/info/unsubscribe.htm. You can manage all your Microsoft.com communication preferences at this site.

Legal Information.

This newsletter was sent by the Microsoft Corporation
One Microsoft Way
Redmond, Washington, USA
98052

Sign up for other newsletters | Unsubscribe | Update your profile
© 2009 Microsoft Corporation Terms of Use | Trademarks | Privacy Statement
Microsoft

Your cOmment"s Here! Hover Your cUrsOr to leave a cOmment.


Subscribe to: Post Comments (Atom)