Windows Experience Blog : Security

Brandon’s Guide to Awesome New Windows 7 PCs

Brandon LeBlanc — Thu, 22 Oct 2009 19:20:06 GMT

Many of you may be on the market for a new Windows 7 PC. Our partners are delivering new PCs we think you will love and just in time for the holidays! Below are hot and slick looking Windows 7 PCs in categories we think will be big for holiday 2009.

Please note that many of the PCs with features mentioned below are just one of many configurations these PCs come with. Many of these PCs can be configured and customized to your liking.

All-in-one PCs:

Sony VAIO L Series: Features a Quad Core processor, 24” widescreen touch display, discrete graphics, lots of memory and storage.
Dell Studio One 19: Features a Quad Core processor, lots of storage, a Blu-ray combo drive and an 18.5" multitouch HD widescreen display.
HP TouchSmart 300z Series: Features discrete graphics, an optional built-in TV tuner and a 20" multitouch widescreen display.

Ultra-thin PCs:

Acer Aspire 4810T: Offers a 14" screen, good battery life, and weighs only 2.4 lbs.
Dell Adamo 13: Features a slick looking aluminum chassis, 13.4" edge-to-edge HD display, ultra-slim .65" profile, Bluetooth and optional Mobile Broadband.
Toshiba Satellite T135: Features a 13.3" HD widescreen display, full size keyboard, 1.5" profile and weighs 4.7 lbs.

Touch PCs:

Lenovo ThinkPad T400smt: A lightweight Laptop PC with a 14.1" multitouch display, integrated webcam, and dual-channel digital microphone.
Toshiba Satellite M500: Features a lightweight, 14.1" touch screen and specializes in mobility. Note that not all M500 models feature Windows Touch however.

Netbook PCs:

HP Mini 110 by Studio Tord Boontje: Features both style and mobility with its 10.1" HD widescreen – and just 2.35 lbs.
Toshiba mini NB205: Weighs 3 lbs., has 3G Mobile Broadband and good battery life.
Lenovo IdeaPad S10-2: Features a multitouch pad, and a 10.1" LED backlit screen.

But wait! There’s more! Here are some other great PCs that really show off some of things customers do on their PCs everyday (yes, some people game every day):

Great Gaming PCs:

Falcon NW Fragbox: A portable desktop PC with a Quad Core processor, discrete graphics, lots memory and storage.
Alienware M17x: Features Dual GPUs, a Quad Core processor and 12GB of DDR3 memory (that’s a lot of memory!).
Asus G51Vx: A 15" gaming laptop PC featuring NVIDIA graphics with dedicated 1GB of memory, and a backlit gaming keyboard.

More Multimedia PCs:

Dell Studio XPS 16: Features premium ATI graphics, optional Intel Core i7 processor configuration, and your choice of either a 15.6" LED or 16" RGBLED seamless display.
HP Pavilion dv8t: Features an 18.4" HD widescreen, Blu-ray drive, TV tuner, and premium sound system with subwoofer and Dolby audio.
Toshiba Satellite A505: Features discrete graphics (certain configurations), a dual-core CPU, and premium surround sound speakers, and a HD 16" screen.
Lenovo IdeaPad Y650: A very stylish, thin, and light notebook at only 1 inch thick and weighing only 5.6 lbs.

All Around Great Everyday PCs:

Dell Studio XPS 13: Features a 13.3" edge-to-edge display, backlit keyboard and NVIDIA graphics.
Toshiba Satellite U500: Versatility, power and style and touch capable. A 13.3” mobile do-it-all machine.

Work from Anywhere (Mobility):

HP Pavilion dm3: Features a 13.3” ultra wide screen display and NVIDIA graphics, under 4 lbs. and 1 inch thin with great battery life.
Lenovo ThinkPad X200T: Features a lightweight form factor, Intel Core 2 Duo processor, and is a Tablet PC (great for taking notes during meetings!).

Safeguard Your Work:

Lenovo ThinkPad X301: Features GPS, Bluetooth and Unified wireless capabilities.
HP ProBook 5310: Features a 13.3” HD LED display with integrated mobile broadband and a thin and lightweight design.

We are also making it easier for customers to choose which Windows PC is right for them with an updated version of Windows PC Scout (previously known as Windows Laptop Scout).

Windows PC Scout has been completely updated with new PCs and new ways of helping customers better identify the PC they want based on their needs. Essentially Windows PC Scout “Simplifies your search” for the right PC. There are a couple of ways Windows PC Scout will help you find the PC you want:

Laptop 101: Educates you on Laptop PCs.
Usage: Discover how certain Laptop PCs are used for specific needs.
Recommend: Match your needs with quality-checked Laptop PCs by Microsoft. Windows PC Scout provides clear recommendations on Windows PCs at a variety of price points.
Buy: Once you’ve found a PC, Windows PC Scout makes it easy to click through to purchase the right PC for them through major retailers, the online Microsoft Store or PC manufacturer websites.

If you’re looking for a new Windows 7 PC – give Windows PC Scout a spin!

As you can see, there is such an amazing variety of Windows 7 PCs for you to choose!

Lenovo Announces New T-Series ThinkPad Laptop – The T400s

Brandon LeBlanc — Tue, 23 Jun 2009 21:14:09 GMT

Lenovo announced today a new T-Series ThinkPad Laptop called the T400s. Lenovo’s T-Series laptops cater to business customers looking for a powerful and thin laptop. Lenovo put a lot of effort in designing this laptop to be light, durable, robust, and powerful – key elements to a great business laptop for the mobile worker. I’ve had the chance to play with a T400s here in my office for the last few days and it has been a great experience so far.

The T400s will ship with the following specs:

Choices of Intel 2.53 GHz Core2Duo processors and graphics
Choices of up to 128GB SSD or 250GB hard drive storage
9.5 mm slim DVD burner or Blu-Ray player
Ethernet (Gigabit) & WiFi
Optional WiMAX, WWAN, Bluetooth and Ultra-wideband Connectivity
34mm Express Card slot or 5-in-1 multimedia card reader
Almost 6 hours of battery life
Display Port and VGA connectors (Supports 2 External Monitors!)
Energy Star 5.0 Compliant
2 Built-in USB Ports
1 Built-in eSATA/USB Combo Port (Total of 3 USB Ports)
Fingerprint Reader
TPM 1.2

As you can see, with these specs the T400s is quite powerful. It also can come jam-packed with network connectivity options (including support for Mobile Broadband) helping keep you connected no matter where you go. Because security is super important to the Mobile Worker – the T400s comes with a Fingerprint Reader and TPM 1.2. With TPM 1.2, BitLocker can be used in both Windows Vista and Windows 7 to secure the laptop. You also get your choice of storage. My T400s had a 250GB hard drive.

The design of the T400s is pretty slick. The T400s uses Lenovo’s “Top Cover Roll Cage”, which they first introduced with the X300, in the construction of its frame. This roll cage is made out of reinforced monocoque carbon fiber which is the same stuff they use on airplanes and super-fast cars. This keeps the T400s pretty light. It weighs in at just under 4lbs (with a 6 cell battery) which is about 20% less than its T400 predecessor. A non-SSD hard drive may also add some weight to the laptop as well as they tend to be a little bit heavier. But Lenovo gives you the choice to choose (as mentioned above).

This is a pretty thin laptop, measuring in at 0.83 inches (yes, I measured!). Part of the ability to keep this laptop so thin is that Lenovo uses a very thin 14.1 inch LED screen.

For the T400s, Lenovo tweaked the keyboard a bit. The keys are much closer to each other – likely to prevent gunk from getting underneath. The Delete and ESC keys are also larger.

The touchpad is now flush with the palm rest and is textured to help people feel its location.

I also discovered that the T400s has an “always on” USB port in the back. This means that if the system is in sleep/standby or hibernate mode you can still plugin devices like MP3 players or mobile phones and have them charge off the laptop’s battery.

Another very interesting aspect of this laptop is how Lenovo optimized it for VoIP. Many businesses are utilizing VoIP for their communications. This laptop can essentially serve as your communication hub when you’re out-and-about. Lenovo added a new toggle switch at the top of the keyboard so that you can easily increase and decrease your system volume – putting the user in more control of their audio. I’m told this will become a standard for all Lenovo laptops going forward. The speaker volume has been amped up to be more than 2x greater than audio levels see on the T400. And the speakers themselves have been moved to the sides instead of on the palm rest area seen on the X300 series laptops.

Lenovo put 2 digital microphones in for better recording. The dual microphones are expected to cut down the amount of ambient noise picked up during your VoIP calls and improve clarity with sound. And of course you can have audio without video. The T400s comes with built in 2.0 megapixel webcam that can shoot video up to 30fps. The webcam also has “Lower Light Capture Capability” to capture decent video is very low-lit conditions.

Lenovo puts Windows Vista Business or Windows Vista Ultimate on their business laptops. The T400s I have came with Windows Vista Business.

However I decided to put Windows 7 (the Windows 7 RC) on it. Instead of upgrading from Windows Vista, I did a clean install. Windows 7 picked up most of the drivers with updates to many of them available for me on Windows Update. I had everything up and running very quickly.

With Windows 7 and the T400s, I am able to secure the laptop with a variety of features from Windows 7. Windows 7 has BitLocker (which we introduced with Windows Vista). Using TPM, I was able to encrypt the hard drive of the laptop to ensure if the laptop ever gets lost so that no one can get the data off the hard drive.

Windows 7 has a new biometric framework and in combination with UPEK’s biometric software – I was able to quickly enroll fingerprints for a further enhanced security. UPEK takes advantage of Windows 7’s biometric enhancements. This process was incredibly easy. As mentioned above, the T400s can come with built in Mobile Broadband. Windows 7 brings enhancements that take advantage of Mobile Broadband making it easy to connect and stay connected.

I had fun playing with this laptop. Special thanks to Lenovo for the opportunity!

The Lenovo ThinkPad T400s will become available at www.lenovo.com starting at $1,599.

The Windows Security Blog

Brandon LeBlanc — Thu, 11 Dec 2008 20:24:59 GMT

You may have noticed a new blog has appeared under the menu of our site today. I’d like to welcome Paul Cooke, who is a Director here at Microsoft, to our site. Paul and his team will be running the Windows Security Blog – which is what you could consider the successor to the Windows Vista Security Blog. I am really excited about the addition of the Windows Security Blog to our site as I know many readers are very interested in Windows Security. Look for a post from Paul soon!

Best Practices for keeping your Windows Live ID safe

Brandon LeBlanc — Tue, 06 May 2008 04:35:00 GMT

Your Windows Live ID is essentially your online identity for all of the Windows Live services, Xbox Live, Zune and other third party websites (such as Expedia.com) that utilize Windows Live ID. If you're using Windows Live Hotmail and Windows Live Messenger, your Windows Live ID stores all your contacts and email messages. Your Windows Live ID is definitely something you don't want to have compromised and I've got several pointers - or best practices - in keeping your Windows Live ID safe.

Do not hand out your password! Don't give anyone your password to your Windows Live ID. Handing out your password to anyone is simply asking for trouble. Don't even give out your password to friends or family. I can't imagine a reason why they would need it. Just don't give out your Windows Live ID credentials at all.

Be careful giving your Windows Live credentials on non-Microsoft websites. There are some websites out there that will claim they "require" your Windows Live ID credentials for their service. Some sites use this tactic to gain access to your Windows Live ID.

Fact: Microsoft will only ask for your Windows Live ID credentials on login.live.com and nowhere else!

Use a strong password for your Windows Live ID. Don't use common words or names. Use a combination of uppercase and lowercase letters, numbers, and symbols.

Don't use an obvious answer to your secret question. Microsoft provides a list of possible "secret questions" for your account. A secret question is used when you forget your password for your Windows Live ID. Choose a secret question that has an answer that people won't be able to guess (friends, family, etc). The risk you have in using a secret question with an answer your friends might be able to guess is that your friends can try to "hack" your Windows Live ID and have fun with you. Your secret answer must have 5 characters or more and is not case sensitive. Remember to remember your secret answer of course.

Added protection: make your password expire every 72 days. You can login to account.live.com and change your password for your Windows Live ID and configure it to expire every 72 days. I personally don't choose this option rather I change my password every couple weeks on my own.

Neelamadhaba Mahapatro, General Manager for Microsoft's Identity Services (including Windows Live ID) has a post over on the Windows Live Dev Blog explaining Microsoft ongoing to commitment to keeping your Windows Live ID safe and what's being done today to protect Windows Live ID users from phishing.

Get Green and Stay Green with Windows Live OneCare

Brandon LeBlanc — Mon, 17 Mar 2008 23:36:00 GMT

To help celebrate St. Patrick's Today - the Windows Live OneCare Team is kicking off a brand new campaign: Get Green Stay Green.

The Get Green Stay Green campaign is designed to make sure Windows Live OneCare users are staying "green" - meaning their PC Health Status. Here is Amy Barzdukas, Senior Direct here at Microsoft, to talk about Windows Live OneCare and keeping your PC safe. Amy leads the Windows Live OneCare Team.

Video: Microsoft Windows Live OneCare

I use Windows Live OneCare on my 3 personal home PCs - which are connected together in an OneCare Circle (you can have up to 3 PCs in an OneCare Circle). This lets me manage the PC Health for all my personal PCs. If any of my PCs in my OneCare Circle have their PC Health Status change to yellow or red, I can quickly see which PC it is and why. I can then do what is needed to bring that PC back to green. Keeping all my PCs green is very important to me. If any of my PCs slip into yellow or red - I fix it immediately.

I have a few tips to share from personal experience in keeping my PCs green in my OneCare Circle that you can use to help keep your own PCs green:

Make sure you have your PCs backed up. Windows Live OneCare can backup your PCs automatically to a centralized point on your home network. In my case, I have all my home PCs backed up to my Windows Home Server which Windows Live OneCare detects.
Have your firewall turned on. Windows Live OneCare can maintain and monitor your firewall - protecting your PC from attacks. Even though I'm behind a pretty secure router - I have the firewall turned on for all PCs in my OneCare Circle to add an extra level of protection.
Make sure Protection Plus (malware definitions) are up to date. This ensures your PC is protected from the latest internet garbage.
Do a PC Tune-up! Windows Live OneCare can do regular Tune-ups that can ensure your PC is running at its best.
Make sure your PC has the latest updates from Windows Update. Important updates are key to ensuring your PC stays green.

Again, keeping my home PCs green is very important to me and the above tips help me to do so.

Do you have any tips for Windows Live OneCare and keeping your PC green? I'd love to hear them. Leave a comment below. I would be particularly interested in hearing about how you use Windows Live OneCare to ensure your PCs are backed up.

Users can also visit http://www.getgreenstaygreen.com/ and find out what it takes to keep their PC "green".

Secure your wireless network with Windows Live OneCare 2.0

Brandon LeBlanc — Tue, 16 Oct 2007 04:10:00 GMT

Today, quite a few households have wireless networks that are unsecure - wide open for anyone to connect to. This could be a huge problem especially if PC's in that home are sharing important family files - like photos and documents - that shouldn't be seen by strangers. In Windows Live OneCare 2.0, a new feature is coming that will let users of Windows Live OneCare secure an unsecure wireless network in their home. I decided to give this new feature a try and share my experience.

Once I connected to the unsecure wireless network, I launched Windows Live OneCare and was alerted by Windows Live OneCare that I was on an unsecure wireless network and that it can help me to secure it. I clicked "Turn-on" and started the process. Here is a video demo of me going through the process of securing an unsecure wireless network:

Video: Demo: OneCare Wireless Security

I'd like to take a few moments to elaborate on a few things from the video. First off: the router I used to test this was *not* connected to the Internet. Most users who will use this feature to secure their router will have it connected to the Internet. Once going through the wizard to secure the router with Windows Live OneCare - the user and any other PC's on the home network should be able to access the Internet just fine. There will be no issue securing a router connected to a WAN (WAN being your ISP for Internet access).

To secure your wireless network - you are required to connect via cable (Cat-5) - which is why I needed a Cat-5 cable in my video to proceed with the process of securing my router. This is important as this prevents anyone from connecting to your network wirelessly and using Windows Live OneCare to wipe your wireless networking settings with their own settings. This is what the OneCare Team calls the "proof of ownership" check.

In securing your router - it does not completely wipe out all your settings. The settings that Windows Live OneCare changes during the securing process are the SSID, enabling of WEP security, & setting of the WEP key. After Windows Live OneCare secures your router, you are given instructions on how to set up other PC's on your home network with the new settings Windows Live OneCare enabled on your router.

This is looking to be a very useful and interesting feature for home users who are unfamiliar (and maybe uncomfortable) getting onto their router and configuring it for secure wireless capabilities.

There is a wiki setup over on Channel 9 with informaton on this feature of Windows Live OneCare 2.0 worth checking out as well.

Demo: Windows Live OneCare 2.0

Brandon LeBlanc — Thu, 19 Jul 2007 09:51:00 GMT

Last week Nick announced that the Windows Live OneCare 2.0 Beta Program has begun. Windows Live OneCare 2.0 is the next major release of Microsoft's all-in-one PC protection program. Windows Live OneCare not only protects users from viruses and spyware, but also helps users make sure their important data is backed up and that their PC's are updated with the latest updates from Windows Update.

Chris Overd over at LiveSide briefly touches upon features within Windows Live OneCare 2.0 such as Multi-PC support with your OneCare Circle, Centralized Backup, and the upcoming online photo backup service. However I took some time to record a little demo video showcasing some of Windows Live OneCare 2.0's new features including the new PC startup management tool and the OneCare Circle.

Video: Windows Live OneCare 2.0 Demo

You will notice that in the demo, I didn't touch upon Windows Live OneCare 2.0's new Centralized Backup feature. That is because my PC's on my home network have all their backups managed by Windows Home Server, which was released to manufacturing earlier this week. Windows Live OneCare 2.0 takes into account PC's being backed up to a Windows Home Server. But more on Windows Home Server at a later date.

So just how does Windows Live OneCare 2.0 work with Windows Vista specifically? Windows Live OneCare 2.0 takes advantage of Windows Vista's Network Locations (Private VS Public) and protection levels with its firewall settings. Windows Live OneCare 2.0 ensures protection for your PC depending on your Network Location. Windows Live OneCare 2.0 uses Windows Vista's networking features to help protect the user's PC.

This is just the beginning of the beta program for Windows Live OneCare 2.0 Beta Program. Expect Windows Live OneCare 2.0 to evolve throughout the beta.

Expect this demo video to be the first of many demo videos to come on a variety of topics!