Windows Client UPDATE, July 24, 2003

==== This Issue Sponsored By ====

LinkEdge Technologies Inc. http://www.linkedgetech.com

====================

1. Commentary: Getting More from the Microsoft Office Suite 2. News & Views - Microsoft Releases Three New Patches: One Critical, Two Important

3. Announcements - Take Our Brief Active Directory Survey! - Windows Scripting Solutions for the Systems Administrator

4. Resources - Tip: Configure Windows XP Searches to Default to Your Preferences - Featured Thread: Problems with Icon Changes in Windows Me

5. Events - New--Mobile & Wireless Road Show!

6. New and Improved - Recover Unbootable Systems - Submit Top Product Ideas

7. Contact Us - See this section for a list of ways to contact us.

==== Sponsor: LinkEdge Technologies Inc. ==== FREE Evaluation: PointinSightTM is a collaborative, email based, Issue Management Software (feature rich) that takes the concept of managing "team member issue management" to a new level. Rather than waiting on responses from each team member to understand the status of each issue, PointinSightTM now delivers, by a simple click of a button, the "exact" position, as an overview, of each issue submitted. PointinSightTM can be easily implemented to manage every type of project: Small (short-duration projects), Middle, to Large Enterprise Projects. Project Managers and team members (if allowed) can see the status and current position of each issue in a Enterprise Dashboard viewpoint instead of just text. Save time spent on administration and focus on the actual work of your projects. URL: http://www.linkedgetech.com Ph: 818-700-2920 ext:5 email: [email protected]

====================

==== 1. Commentary: Getting More from the Microsoft Office Suite ====
by David Chernicoff, [email protected]

Last week, a friend who runs a small nonprofit foundation called me. I provide volunteer IT support for the foundation, and my friend asked me to recommend a desktop publishing program that wouldn't be too expensive. The foundation wanted to publish a newsletter about its fundraising activities that would also keep supporters informed about where the money goes. The plan was to self-publish the newsletter, hit the local copy center to make copies, then use volunteers to stuff envelopes.

I asked a few questions about the newsletter's purpose and content, then asked my friend why she wasn't planning to use Microsoft Word to produce the newsletter. I knew that the foundation's mailing list was in Microsoft Access and that the foundation's version of Microsoft Office (Office 2000) is capable of producing a newsletter. I pointed out that a Newsletter wizard is available for Office to help in the initial creation of newsletters, and I directed my friend to the Web site from which she could download the wizard.

After this conversation, I made a few phone calls to some other small businesses and nonprofits that I work with. I found that none was making use of the publishing features in Word, even though each had ongoing projects that could benefit from some of Word's more advanced features. None of the people I talked with were hard-core computer users, and the few who considered themselves computer-savvy had never heard of the Microsoft Office Tools Web site, available at http://office.microsoft.com .

I know that Windows Client UPDATE readers use the Office Update Web site ( http://office.microsoft.com/productupdates/default.aspx ) to make sure that the latest patches and service packs are applied to their computers, but how many of you have checked out the tools site? Aside from tools such as the Newsletter wizard (which you can find at http://search.officeupdate.microsoft.com/templategallery/ct89.asp ), the site has hundreds of interesting and useful templates for all sorts of common business and personal documents that you probably use regularly and might even be buying from your local office supply store. You can find these templates in the Office Template Gallery, at http://officeupdate.microsoft.com/templategallery .

Templates are available for more than just Word; I've used downloads from the site with Word, Excel, and Access. And these templates aren't solely for small office/home office (SOHO) or personal use--many would prove useful in a large corporation. If you've never made use of the Office Tools or Template Gallery Web sites, a visit would be well worth your time, although most of the more interesting items available require at least Office 2000. You've made a significant investment in the Microsoft Office suite, both in dollars and in the time you've taken to learn to use it. With the help of these Web sites, you can get significantly more out of the software than you might have imagined.

====================

==== 2. News & Views ====
by Mark Joseph Edwards, [email protected]

Microsoft Releases Three New Patches: One Critical, Two Important

Microsoft released three security bulletins last week regarding three problems in Windows platforms, one of which Microsoft considers critical. The other two are considered important.

The remote procedure call (RPC) interface contains an unchecked buffer that could let intruders execute the code of their choice on unprotected systems. Blocking port 135 helps protect against the vulnerability, as does disabling Distributed COM (DCOM) by using dcomcnfg.exe. The problem affects Windows Server 2003, Windows XP, Windows 2000, and Windows NT. Microsoft has made patches available for all OSs. You can read more about the problem and find links to the patches in Microsoft Security Bulletin MS03-026 (Buffer Overrun In RPC Interface Could Allow Code Execution). The patch will also be included in Windows 2003 Service Pack 1 (SP1), XP SP2, and Win2K SP5.

Another unchecked buffer was discovered in the Windows shell; it could also let intruders run code of their choice. However, because the shell runs in the security context of the logged-on user, Microsoft considers the problem to be important, rather than critical. The problem only affects XP SP1 systems (but not XP Gold). You can download the patch from Microsoft Security Bulletin MS03-027, (Unchecked Buffer in Windows Shell Could Enable System Compromise). The patch will be included in XP SP2.

The third problem allows cross-site scripting using error pages included with Microsoft Internet Security and Acceleration (ISA) Server. Because of a flaw in the way some of the error pages are encoded, a malicious user could cause a script to execute on a user's system. Microsoft released a patch for ISA Server systems with SP1 or Feature Pack 1 installed. The patch is linked in Security Bulletin MS03-028 (Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack) and will be included in the next ISA Server service pack.

==== 3. Announcements ====
(from Windows & .NET Magazine and its partners)

Take Our Brief Active Directory Survey!

Windows & .NET Magazine would like to know how your organization uses Active Directory. Your feedback will be kept absolutely confidential, so take our brief survey today! http://www.zoomerang.com/survey.zgi?SR9V871GEDPDXA8232G9XG8S

Windows Scripting Solutions for the Systems Administrator

You might not be a programmer, but that doesn't mean you can't learn to create and deploy timesaving, problem-solving scripts. Discover Windows Scripting Solutions, the monthly print publication that helps you tackle common problems and automate everyday tasks with simple tools, tricks, and scripts. Try a sample issue today at http://www.winscriptingsolutions.com/rd.cfm?code=fsei263xup

==== 4. Resources ====

Tip: Configure Windows XP Searches to Default to Your Preferences
(contributed by David Chernicoff, [email protected])

One feature in Windows XP that irritates me is the built-in search function. I find it annoying to have to configure the advanced search options to my preferences every time I use the search engine. Fortunately, I've found that you can make some registry edits to configure searches to default to your preferences. (You can continue to use the GUI to change the Advanced parameters in the search engine.) To make the registry changes, take the following steps:
1. Launch the registry editor.
2. Open HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer.
3. In the right pane are a couple dozen entries. You need to be concerned with only five: CaseSensitive, IncludeSubFolders, SearchHidden, SearchSlowFiles, and SearchSystemDirectories.
4. To change the default behavior (i.e., turn it on or off) for each of these five entries, double-click the value name and set the value data to 1 to enable or 0 to disable.
5. Log off to enable the changes.

Featured Thread: Problems with Icon Changes in Windows Me

Forum member wretch downloaded TuneUp Utilities 2003 onto his Windows Me computer. He used the Icon Manager to change the computer's icons and found a flaw: When he checked his Start menu folders, all the folder icons changed properly except the one for My Pictures. Now, when he clicks Start, Documents, My Pictures, he sees the error message, "This program does not have an Icon associated with it. Please change the setting in the Folder Options Control Panel." He has tried everything except editing the registry to solve the problem but hasn't been able to do so. If you can help, join the discussion at the following URL: http://www.winnetmag.com/forums/rd.cfm?cid=39&tid=61479

==== 5. Events ====
(brought to you by Windows & .NET Magazine)

New--Mobile & Wireless Road Show!

Learn more about the wireless and mobility solutions that are available today! Register now for this free event! http://www.winnetmag.com/roadshows/wireless

==== 6. New and Improved ====
by Sue Cooper, [email protected]

Recover Unbootable Systems

UltraBac Software released UltraBac Disaster Recovery (UBDR) Pro, software that uses snapshot disk imaging to back up Windows servers and workstations, enabling fast recovery of unbootable machines. After installing the software, you can use its "lights out" scheduler to back up snapshot images of selected partitions to tape, disk, or a Universal Naming Convention (UNC) path. A built-in locked file backup agent ensures that all files are backed up. UBDR Pro backs up only active disk clusters, ignoring nonpertinent page files and hibernation data. The software compresses backup image files on the client side before transferring them to a network storage location to reduce traffic and save storage space.

You can restore systems that you're protected with UBDR Pro at a rate as fast as 800MB per minute on high-speed Gigabit networks. To recover a failed system, you can insert and boot from a universal UBDR Pro CD-ROM, then initiate a full system restore from tape or the network. You can use the encryption feature to secure backup media according to your storage security requirements. UBDR Pro's pricing starts at $695 per server. The software supports all Windows servers and workstations. Contact UltraBac Software at 425-644-6000 or [email protected]. http://www.ultrabac.com

Submit Top Product Ideas

Have you used a product that changed your IT experience by saving you time or easing your daily burden? Do you know of a terrific product that others should know about? Tell us! We want to write about the product in a future Windows & .NET Magazine What's Hot column. Send your product suggestions to [email protected].

==== Sponsored Links ====

AutoProf

Jerry Honeycutt Desktop Deployment Whitepaper

http://ad.doubleclick.net/clk;5790077;8214395;s?http://www.AutoProf.com/Update_TextLinks_2003_06_23.html

SybariLink0718

Learn about the new security features of Exchange 2003 -- FREE!

http://ad.doubleclick.net/clk;5856606;8214395;t?http://www.winnetmag.com/seminars/securityrisks ====================

==== 7. Contact Us ====

About the newsletter -- [email protected] About technical questions -- http://www.winnetmag.com/forums About product news -- [email protected] About your subscription -- [email protected] About sponsoring UPDATE -- [email protected]

==== This Issue Sponsored By ====

LinkEdge Technologies Inc. http://www.linkedgetech.com

====================

1. Commentary: Getting More from the Microsoft Office Suite 2. News & Views - Microsoft Releases Three New Patches: One Critical, Two Important

3. Announcements - Take Our Brief Active Directory Survey! - Windows Scripting Solutions for the Systems Administrator

4. Resources - Tip: Configure Windows XP Searches to Default to Your Preferences - Featured Thread: Problems with Icon Changes in Windows Me

5. Events - New--Mobile & Wireless Road Show!

6. New and Improved - Recover Unbootable Systems - Submit Top Product Ideas

7. Contact Us - See this section for a list of ways to contact us.

==== Sponsor: LinkEdge Technologies Inc. ==== FREE Evaluation: PointinSightTM is a collaborative, email based, Issue Management Software (feature rich) that takes the concept of managing "team member issue management" to a new level. Rather than waiting on responses from each team member to understand the status of each issue, PointinSightTM now delivers, by a simple click of a button, the "exact" position, as an overview, of each issue submitted. PointinSightTM can be easily implemented to manage every type of project: Small (short-duration projects), Middle, to Large Enterprise Projects. Project Managers and team members (if allowed) can see the status and current position of each issue in a Enterprise Dashboard viewpoint instead of just text. Save time spent on administration and focus on the actual work of your projects. URL: http://www.linkedgetech.com Ph: 818-700-2920 ext:5 email: [email protected]

====================

==== 1. Commentary: Getting More from the Microsoft Office Suite ====
by David Chernicoff, [email protected]

Last week, a friend who runs a small nonprofit foundation called me. I provide volunteer IT support for the foundation, and my friend asked me to recommend a desktop publishing program that wouldn't be too expensive. The foundation wanted to publish a newsletter about its fundraising activities that would also keep supporters informed about where the money goes. The plan was to self-publish the newsletter, hit the local copy center to make copies, then use volunteers to stuff envelopes.

I asked a few questions about the newsletter's purpose and content, then asked my friend why she wasn't planning to use Microsoft Word to produce the newsletter. I knew that the foundation's mailing list was in Microsoft Access and that the foundation's version of Microsoft Office (Office 2000) is capable of producing a newsletter. I pointed out that a Newsletter wizard is available for Office to help in the initial creation of newsletters, and I directed my friend to the Web site from which she could download the wizard.

After this conversation, I made a few phone calls to some other small businesses and nonprofits that I work with. I found that none was making use of the publishing features in Word, even though each had ongoing projects that could benefit from some of Word's more advanced features. None of the people I talked with were hard-core computer users, and the few who considered themselves computer-savvy had never heard of the Microsoft Office Tools Web site, available at http://office.microsoft.com .

I know that Windows Client UPDATE readers use the Office Update Web site ( http://office.microsoft.com/productupdates/default.aspx ) to make sure that the latest patches and service packs are applied to their computers, but how many of you have checked out the tools site? Aside from tools such as the Newsletter wizard (which you can find at http://search.officeupdate.microsoft.com/templategallery/ct89.asp ), the site has hundreds of interesting and useful templates for all sorts of common business and personal documents that you probably use regularly and might even be buying from your local office supply store. You can find these templates in the Office Template Gallery, at http://officeupdate.microsoft.com/templategallery .

Templates are available for more than just Word; I've used downloads from the site with Word, Excel, and Access. And these templates aren't solely for small office/home office (SOHO) or personal use--many would prove useful in a large corporation. If you've never made use of the Office Tools or Template Gallery Web sites, a visit would be well worth your time, although most of the more interesting items available require at least Office 2000. You've made a significant investment in the Microsoft Office suite, both in dollars and in the time you've taken to learn to use it. With the help of these Web sites, you can get significantly more out of the software than you might have imagined.

====================

==== 2. News & Views ====
by Mark Joseph Edwards, [email protected]

Microsoft Releases Three New Patches: One Critical, Two Important

Microsoft released three security bulletins last week regarding three problems in Windows platforms, one of which Microsoft considers critical. The other two are considered important.

The remote procedure call (RPC) interface contains an unchecked buffer that could let intruders execute the code of their choice on unprotected systems. Blocking port 135 helps protect against the vulnerability, as does disabling Distributed COM (DCOM) by using dcomcnfg.exe. The problem affects Windows Server 2003, Windows XP, Windows 2000, and Windows NT. Microsoft has made patches available for all OSs. You can read more about the problem and find links to the patches in Microsoft Security Bulletin MS03-026 (Buffer Overrun In RPC Interface Could Allow Code Execution). The patch will also be included in Windows 2003 Service Pack 1 (SP1), XP SP2, and Win2K SP5.

Another unchecked buffer was discovered in the Windows shell; it could also let intruders run code of their choice. However, because the shell runs in the security context of the logged-on user, Microsoft considers the problem to be important, rather than critical. The problem only affects XP SP1 systems (but not XP Gold). You can download the patch from Microsoft Security Bulletin MS03-027, (Unchecked Buffer in Windows Shell Could Enable System Compromise). The patch will be included in XP SP2.

The third problem allows cross-site scripting using error pages included with Microsoft Internet Security and Acceleration (ISA) Server. Because of a flaw in the way some of the error pages are encoded, a malicious user could cause a script to execute on a user's system. Microsoft released a patch for ISA Server systems with SP1 or Feature Pack 1 installed. The patch is linked in Security Bulletin MS03-028 (Flaw in ISA Server Error Pages Could Allow Cross-Site Scripting Attack) and will be included in the next ISA Server service pack.

==== 3. Announcements ====
(from Windows & .NET Magazine and its partners)

Take Our Brief Active Directory Survey!

Windows & .NET Magazine would like to know how your organization uses Active Directory. Your feedback will be kept absolutely confidential, so take our brief survey today! http://www.zoomerang.com/survey.zgi?SR9V871GEDPDXA8232G9XG8S

Windows Scripting Solutions for the Systems Administrator

You might not be a programmer, but that doesn't mean you can't learn to create and deploy timesaving, problem-solving scripts. Discover Windows Scripting Solutions, the monthly print publication that helps you tackle common problems and automate everyday tasks with simple tools, tricks, and scripts. Try a sample issue today at http://www.winscriptingsolutions.com/rd.cfm?code=fsei263xup

==== 4. Resources ====

Tip: Configure Windows XP Searches to Default to Your Preferences
(contributed by David Chernicoff, [email protected])

One feature in Windows XP that irritates me is the built-in search function. I find it annoying to have to configure the advanced search options to my preferences every time I use the search engine. Fortunately, I've found that you can make some registry edits to configure searches to default to your preferences. (You can continue to use the GUI to change the Advanced parameters in the search engine.) To make the registry changes, take the following steps:
1. Launch the registry editor.
2. Open HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer.
3. In the right pane are a couple dozen entries. You need to be concerned with only five: CaseSensitive, IncludeSubFolders, SearchHidden, SearchSlowFiles, and SearchSystemDirectories.
4. To change the default behavior (i.e., turn it on or off) for each of these five entries, double-click the value name and set the value data to 1 to enable or 0 to disable.
5. Log off to enable the changes.

Featured Thread: Problems with Icon Changes in Windows Me

Forum member wretch downloaded TuneUp Utilities 2003 onto his Windows Me computer. He used the Icon Manager to change the computer's icons and found a flaw: When he checked his Start menu folders, all the folder icons changed properly except the one for My Pictures. Now, when he clicks Start, Documents, My Pictures, he sees the error message, "This program does not have an Icon associated with it. Please change the setting in the Folder Options Control Panel." He has tried everything except editing the registry to solve the problem but hasn't been able to do so. If you can help, join the discussion at the following URL: http://www.winnetmag.com/forums/rd.cfm?cid=39&tid=61479

==== 5. Events ====
(brought to you by Windows & .NET Magazine)

New--Mobile & Wireless Road Show!

Learn more about the wireless and mobility solutions that are available today! Register now for this free event! http://www.winnetmag.com/roadshows/wireless

==== 6. New and Improved ====
by Sue Cooper, [email protected]

Recover Unbootable Systems

UltraBac Software released UltraBac Disaster Recovery (UBDR) Pro, software that uses snapshot disk imaging to back up Windows servers and workstations, enabling fast recovery of unbootable machines. After installing the software, you can use its "lights out" scheduler to back up snapshot images of selected partitions to tape, disk, or a Universal Naming Convention (UNC) path. A built-in locked file backup agent ensures that all files are backed up. UBDR Pro backs up only active disk clusters, ignoring nonpertinent page files and hibernation data. The software compresses backup image files on the client side before transferring them to a network storage location to reduce traffic and save storage space.

You can restore systems that you're protected with UBDR Pro at a rate as fast as 800MB per minute on high-speed Gigabit networks. To recover a failed system, you can insert and boot from a universal UBDR Pro CD-ROM, then initiate a full system restore from tape or the network. You can use the encryption feature to secure backup media according to your storage security requirements. UBDR Pro's pricing starts at $695 per server. The software supports all Windows servers and workstations. Contact UltraBac Software at 425-644-6000 or [email protected]. http://www.ultrabac.com

Submit Top Product Ideas

Have you used a product that changed your IT experience by saving you time or easing your daily burden? Do you know of a terrific product that others should know about? Tell us! We want to write about the product in a future Windows & .NET Magazine What's Hot column. Send your product suggestions to [email protected].

==== Sponsored Links ====

AutoProf

Jerry Honeycutt Desktop Deployment Whitepaper

http://ad.doubleclick.net/clk;5790077;8214395;s?http://www.AutoProf.com/Update_TextLinks_2003_06_23.html

SybariLink0718

Learn about the new security features of Exchange 2003 -- FREE!

http://ad.doubleclick.net/clk;5856606;8214395;t?http://www.winnetmag.com/seminars/securityrisks ====================

==== 7. Contact Us ====

About the newsletter -- [email protected] About technical questions -- http://www.winnetmag.com/forums About product news -- [email protected] About your subscription -- [email protected] About sponsoring UPDATE -- [email protected]