Windows 7 Vulnerability Claims

Now that Windows 7 is available, a recent blog by Chester Wisnieski (who works at security vendor Sophos), entitled Windows 7 vulnerable to 8 out of 10 viruses, which has stirred some interest.

Here's a quick summary for those who missed Chester's blog. During a test SophosLabs conducted, they subjected Windows 7 to "10 unique [malware] samples that arrived in the SophosLabs feed." They utilized a clean install of Windows 7, using default settings (including the UAC defaults), but did not install any anti-virus software. The end result was 8 of the 10 malware samples successfully ran and the blog proclaims that "Windows 7 disappointed just like earlier versions of Windows." Chester's final conclusion? "You still need to run anti-virus on Windows 7." Well, we agree: users of any computer, on any platform, should run anti-virus software, including those running Windows 7.

Clearly, the findings of this unofficial test are by no means conclusive, and several members of the press have picked apart the findings, so I don't need to do that. I'm a firm believer that if you run unknown code on your machine, bad things can happen. This test shows just that; however, most people don't knowingly have and run known malware on their system. Malware typically makes it onto a system through other avenues like the browser or email program. So while I absolutely agree that anti-virus software is essential to protecting your PC, there are other defenses as well.

Let me recap some of the Windows 7 security basics. Windows 7 is built upon the security platform of Windows Vista, which included a defense-in-depth approach to help protect customers from malware. This includes features like User Account Control (UAC), Kernel Patch Protection, Windows Service Hardening, Address Space Layout Randomization (ASLR), and Data Execution Prevention (DEP) to name just a few. The result, Windows 7 retains and refines the development processes, including going through the Security Development Lifecycle, and technologies that made Windows Vista the most secure Windows operating system ever released.

Beyond the core security of Windows 7, we have also done a lot of work with Windows 7 to make it harder for malware to reach a user's PCs in the first place. One of my favorite new features is the SmartScreen Filter in Internet Explorer 8. The SmartScreen Filter was built upon the phishing protection in Internet Explorer 7 and (among other new benefits) adds protection from malware. The SmartScreen Filter will notify you when you attempt to download software that is unsafe - which the SophosLabs methodology totally bypassed in doing their test.

So while I'm not a fan of companies sensationalizing findings about Windows 7 in order to sell more of their own software, I nevertheless agree with them that you still need to run anti-virus software on Windows 7.  This is why we've made our Microsoft Security Essentials offering available for free to customers. But it's also equally important to keep all of your software up to date through automatic updates, such as through the Windows Update service. By configuring your computers to download and install updates automatically you will help ensure that you have the highest level of protection against malware and other vulnerabilities.


TechEd Europe 2009 Kicks Off Next Week with Keynote and Post-Keynote Q&A

Join Stephen Elop, President of Microsoft’s Business Division, and Robert Wahbe, Corporate Vice President of the Server and Tools Marketing Group at Microsoft, for the TechEd Europe 2009 keynote on Monday November 9th starting at 6:30am Pacific. During the keynote, Stephen and Robert will discuss the state of IT and the new generation of business solutions from Microsoft that will help customers reach their full business potential. Following the keynote at 8:00am Pacific there will be a post-keynote Q&A with Chris Capossela, Senior Vice President of the Information Worker Product Management Group, Bob Kelly, Corporate Vice President of Infrastructure Server Marketing, and Tami Reller, Corporate Vice President and Chief Financial Officer of Windows and Windows Live.

You’ll be able to watch the keynote and participate in the post-keynote Q&A via the Microsoft TechEd Global Press Room. Additionally, you can follow the excitement on Twitter by using the hashtag #TEE09.


Top 10 reasons to use Windows Home Server in your SOHO

Since we had such a great response from our previous post on the Top 10 reasons to use Windows Home Server, we thought it would be beneficial to share our thinking on the business side of things. Don’t let the name Windows Home Server fool you into thinking that this product was created for home use only. A lot of the reasons that you would use Windows Home Server in your home are just as applicable to a small or home office. Windows Home Server provides a dependable and affordable way to organize and safeguard your work on up to 10 computers. In order to help you see how Windows Home Server could enable you to work more efficiently and effectively, take a look at the top 10 reasons to use Windows Home Server in your SOHO.

1. Conveniently backup important data with automatic image-based backup of up to 10 computers every day.

2. Quickly restore an entire PC, a specific hard drive, or individual files and folders in the event of data loss.

image

3. Remotely access PCs while away from the office to access files, check e-mail, review financial information, or look up an address or phone number.

4. Create a centralized and security enhanced location for important work documents that can be accessed by everyone in the company.

image

5. Easily find and share information by organizing data in a security-enhanced centralized location.

6. Help reduce downtime with automatic monitoring of the health of your computers on the network to keep them active and available.

7. Easily expand storage space and add new capabilities as your business needs grow.

image

8. Grant permissions for varying levels of access by team members to your business documents.

9. Easily extend your investment with new Windows Home Server add-ins for things such as virus protection, power management, and online storage.

10. Easy to use and set-up Windows Home Server in as little in 2 hours.

 

Hopefully, you are now ready to buy your very own Windows Home Server and start running your business at its full potential!

If you are interested in learning more about the benefits of using Windows Home Server in your SOHO, take a look at our Small Office/Home Office page on the Windows Home Server Web site: http://www.microsoft.com/windows/products/winfamily/windowshomeserver/soho/default.mspx

-Nicole


Windows 7 sales exceed Vista sales by 234%

It has been quite amazing to watch the global excitement build around Windows 7, especially during a tough economic climate. It was just a few short weeks ago that we learned about Windows 7 outselling the UK's "own" Harry Potter. In Japan, anxious PC users waited in line to be one of the first to get their hands on Windows 7. And just today, according to the NPD groups' weekly tracking service, Windows 7 software unit sales in the U.S. increased 234% over Windows Vista's first few days of sales.  "A combination of factors impacted Windows 7 PC sales at the outset, but the trajectory of overall PC sales is very strong leading into the holiday season," said Stephen Baker at NPD.

Magic.

Tags: ,


Personalize Windows 7 with the Personalization Gallery on Windows.com

One of my favorite things about Windows 7 is how you can customize it and make it your own. Our personalization features give Windows 7 the ability to be as individual and to reflect who you are! Adding to this is a new Personalization Gallery on Windows.com, launched on Oct 22nd. With Windows 7, we’ve made it easy for people to customize their PC with different themes. Each theme has a custom background (or a series of backgrounds that shuffle), different Aero Glass colors, and sounds. Not only will you find Windows 7 themes on the Personalization Gallery, you’ll also find desktop backgrounds and desktop gadgets to download as well.

Personalization Gallery

For the first time ever, Microsoft is working with other companies to enable them to offer their customers a branded experience on the desktop through Windows 7. The effort is part of a pilot program running until October 2010 by Microsoft Advertising. As of today, you will find themes from 7 global advertisers with well-known brands such as Coca Cola, Ducati, Ferrari, Infiniti, Pepsi, Porsche and Twentieth Century Fox on the Personalization Gallery for download. So if you are a fan of one of these brands, check them out! For more on this effort from Microsoft Advertising, see this blog post.

We’re also offering new Microsoft branded themes too – including the Xbox game Gears of War, Zune, and Bing!

So what if you want to make your own theme? No problem – it’s very easy. Click here for a step-by-step outline (and video) on how to customize and create your own themes. Once you’ve created your own theme, you can share it with you friends and family on Windows Live SkyDrive.

For you geeks out there wanting to know more about how we went about designing the ability to use themes in Windows 7, see this blog post on the Engineering Windows 7 Blog.


Windows Home Server grows as your needs grow

If you look back at posts from several weeks ago, I wrote about the Top 10 Reasons to use Windows Home Server. Since then, I have been explaining each bullet in more detail including backup and restore , installing your home server , and connecting to friends and family through Windows Home Server’s Remote Access. Today, I will tell you a little more about item number 5 on the list - Windows Home Server’s Drive Extender and how it can provide an unlimited amount of space for your large collection of recorded Family Guy episodes or the thousands or pictures that are sitting unprotected on your PC.

With Windows Home Server, storage space grows as your needs and digital possessions grow. Thanks to Windows Home Server Drive Extender , you are able to add internal or external hard drives of any size so which will create an unlimited amount of storage space for your HD movies, pictures, or huge collection of Family Guy episodes. Users will no longer have worry about disk drive letters (C:, D:, E:, etc. etc.) as they add more hard drives to their home server, since Windows Home Server treats the disk space as a large pool of available space. Windows Home Server also monitors the health of each hard drive that is added. The lights on the outside of the server will turn Red if a drive is failing, Purple if there's a drive but it's not configured and Blue if it's configured and healthy.

image

*Screen shot of a Windows Home Server with over 3TB of space

In a recent satisfaction survey completed by Windows Home Server users, we found that 54% of people using the English version of Windows Home Server have 4 or more hard drives connected to their server! Some more fun facts about how people today are getting the most out of their Windows Home Server’s Drive Extender include:

  • The largest number of hard drives currently attached to a home server is 30, there are lots and lots of people with more than 10 hard drives attached to their home servers
  • The largest amount of available disk space that we have seen (so far) is: 36.603516 terabytes
  • The largest amount of used disk space that we have seen (so far) is: 24.093750 terabytes

 image

*Fans in a home-built Windows Home Server that are being used to cool 13 hard drives.

Windows Home Server Drive Extender provides the reliability benefits of RAID (Redundant Array of Independent Disks) without the complexity. Windows Home Server supports reliability by duplicating designated shared folders – so important data (e.g. your Photos, Music, etc.) will be stored on separate hard drives helping to provide protection against hard drive failure.  Folder Duplication is configurable on a per shared folder basis, so a given shared folder can have multiple copies, with each one being stored on a separate hard drive.

How is it different from RAID solutions?

  • Any hard drive, any time. You are not restricted to simply adding more hard drives of the same type and size. When you want to grow your home server storage, you just buy whatever hard drive you like and add it.
  • Internal and external hard drives can be used to grow your storage. No space in your home server case? No problem, plug in one or more USB 2.0 or FireWire hard drives.
  • Hard drive removal, as explained above. With time, it will be important to remove the older smaller hard drives and put in new larger hard drives so you can store more stuff.

To see how easy it is to add and remove a hard drive first hand, take a look at the screen cast below:

 

-Nicole


Migrating from Windows XP to Windows 7 - Guidance for IT pros

Every day this week long-time Springboard technical contributor and Windows deployment insider, Jeremy Chapman, will post a blog about how to think about Windows 7 deployment projects.  We debated on making this a whitepaper or a feature article, but to keep things less formal, we went with a multimedia blog series. This series won't just cover steps to publish images in your Windows Deployment Services environments, instead it goes much broader into the major steps of deployment all-up; from figuring out what applications and hardware you have to migrating files, managing applications, building images, incorporating drivers and automating stuff end-to-end. Jeremy has been a veteran member of the Microsoft Deployment Toolkit team and while he won't be posting the classic "1500 pages" of how-to content, he will stay on his quest for the elusive and often escalated-for "one-page paper" to migrate enterprise customers from Windows XP to Windows 7. Let's see if he can do it!

Part 1 is already up and parts 2-5 are coming each day this week:

  1. The "One-Pager" for Moving from Windows XP to Windows 7 (Overview)
  2. Migrating User Files and Settings from Windows XP to Windows 7
  3. Application Management and Preparing for a Windows 7 Deployment
  4. Choosing and Image Strategy and Building Windows 7 System Images
  5. Automating the migration from Windows XP to Windows 7 End-to-End

Subscribe to the RSS feed or check back for the rest this week. If you are coming to TechEd Europe next week, Jeremy will be delivering multiple sessions on Windows deployment and application compatibility. Please let us know what you think about these blogs, the longer multimedia format and whether you would like to see other topics covered.

 As always, thanks for reading and I hope to see some of you next week at TechEd!

 Stephen Rose


NVIDIA and Windows Touch

Windows 7 will change the ways you interact with your PC. How you ask? Windows Touch.

Touch refers to the way Windows lets you interact directly with a computer using a finger. Compared to using a mouse, keyboard, or pen, touch can be much more engaging, natural, and convenient.

The Windows Touch technology in Windows 7 is an evolution of the technology that is rooted in Windows Vista. In Windows Vista, single-touch input improved the interaction when using the pen stylus and the mouse of earlier Tablet PC platforms. With Windows 7, users can directly manipulate their computer environment through multitouch for the first time. Users can use a variety of gestures directly on their computer screen to move data, including:

  • Touch, or mouse-such as behavior: tap, double-tap, right-click, drag, and select.
  • Touch gestures- such as Flicks (navigational and editing).
  • Multitouch gestures-- such as zooming in, zooming out, panning, and rotating.

A Windows 7 PC powered by NVIDIA GPUs will deliver faster, more engaging Windows Touch experiences. NVIDIA GPUs are well known for accelerating 3D interfaces. The Windows 7 Aero desktop, now designed using the DirectX 10 API and designed for Windows Touch, is no exception. From the new taskbar previews to Aero Peek, Flip, Snap, and Shake, NVIDIA GPU provides a snappy 3D experience. Windows 7 also uses the GPU to reduce memory consumption by half by eliminating the need to keep a second copy of each window in system memory. This frees up system memory for other applications and keeps your PC responsive.

Multi-touch capability was designed into the core of Windows 7 and is a perfect fit for the new highly visual GPU-accelerated applications like Cooliris and Super Loiloscope. Cooliris lets you browse the web in 3D and now with the addition of Windows Touch, the experience becomes even more immersive. With Super Loiloscope you can have fun creating videos and applying effects with the touch of your finger.

Get Microsoft Silverlight

Touch input does not replace the keyboard and mouse, it enhances them. Touch is a natural and intuitive way to interact with you PC when you are doing common computing tasks such as:

  • Web browsing
  • Interacting with photos
  • Playing games
  • Organizing music and video (creating playlists, sorting media, and organizing content)
  • Reading and sorting e-mail
  • Using documents
  • Managing a Windows workspace

As you can see, your Windows 7 Touch experience will be faster, smoother, and more immersive with an NVIDIA GPU in your PC.

Digg This


Internet TV & Netflix Comes to Windows Media Center in Windows 7

In case you haven’t already heard, I wanted to let you know that we’ve launched Internet TV in Windows Media Center for Windows 7 users. Internet TV lets you watch videos from a variety of providers via the Internet right in Windows Media Center in addition to live and recorded TV (if you have a TV tuner for your PC).

For Windows 7, Internet TV has been updated with enhancements to the UI and features more content from new content providers. Those providers include the CBS Audience Network, Zune (Full Zune Video Podcast Library available), MSNBC, MSN, and more.

Internet TV for Windows Media Center in Windows 7

Zune Video Podcasts in Internet TV

And you can access Internet TV right from the Guide in Windows Media Center!

Internet TV Content in Guide

Internet TV is currently now available for free for people running Windows 7 Home Premium, Professional, Enterprise and Ultimate. The CBS Audience Network and the Zune Video Podcast Library in Internet TV is only be available within the U.S. but Internet TV is also available in the UK with content from Sky and MSN.

UPDATE: Internet TV will be able in the UK coming soon with content from Sky and MSN.

Also now available is Netflix for Windows Media Center in Windows 7!

Netflix for Windows Media Center in Windows 7

Right from Windows Media Center, you can access your Instant Queue to play movies and TV shows and browse the Netflix library and add movies or TV shows to your Instant Queue or Instant Queue. Netflix in Windows Media Center is only available in the U.S. today as Netflix On-Demand (“Instant Watch”) videos are available only in the U.S.

Fire Windows Media Center in Windows 7 up today and give both Internet TV and Netflix a spin!

For more on Windows Media Center in Windows 7, I highlight recommend you check out my post from earlier last month on the 7 great things about Windows Media Center in Windows 7.

Brad Brooks demonstrated Internet TV and Netflix during the keynote at the New York City Windows 7 Launch Event on October 22nd. You can watch the keynote from the event on-demand from the PressPass Windows 7 Virtual Presskit site.

Digg This


New Microsoft Security Intelligence Report Released

Volume seven of the Microsoft Security Intelligence Report (SIRv7) - part of Microsoft's  commitment to providing an unparalleled level of security intelligence to help keep individuals and organizations better informed and to maximize security investments - was released today and there are a couple of tidbits in the report that caught my attention that I thought I would pass on. As a reminder, the SIR is published by Microsoft twice per year and looks at the data and trends observed in the first and second halves of each calendar year.

The first thing that struck me while reading through the report is that for the first time, the SIR shares some high-level security best practices from countries that have consistently exhibited low malware infection. For example, Japan, Austria and Germany's infection rates remained relatively low during the first half of this year.

So how do these regions keep their customers and resources safe from cyber threats?  Japan's infection rates remain relatively low is due in large part to collaborations like the Cyber Clean Center. The Cyber Clean Center is a cooperative project between ISPs, major security vendors and Japanese government agencies aimed at educating users on how to keep their PCs infection free. Austria has implemented strict IT enforcement guidelines to lower piracy rates and this, along with strong ISP relationships and fast Internet lines, has helped ensure the ecosystem is kept up to date with security patches. Germany has also leveraged collaboration efforts with its CERT and ISP communities to help identify and raise awareness of botnet infections and, in some cases, quarantine infected computers.

The other thing that stood out to me was the graph below. This graph shows the effectiveness of automatic updating and shows what happened to the trojan downloader family Win32/Renos once Microsoft released a signature update for Windows Defender via Windows Update and Microsoft Update. Within three days, enough computers had received the new signature update to reduce the error reports from 1.2 million per day to less than 100,000 per day worldwide! To me this shows how important it is for users and organizations to utilize automatic updates to help prevent the spread of malware! 

The report also underscores some of the trends that we have seen from previous versions of the report: for example, the infection rate for Windows Vista is significantly lower than that of its predecessor, Windows XP. It also tells me that the higher the service pack levels of an OS, the lower the infection rate. Once again, these items help point out that you need to keep your software up-to-date. With Windows 7 now available it might be a good time to look at upgrading your OS!

Take a look at the full report at http://www.microsoft.com/sir and use the information to help protect yourself, your networks, and your users.