Network File Monitor Pro

04/30/09 - Replicate, backup, and synchronize data on your network.

Process Lasso

04/30/09 - Manage running processes automatically.

AutoTask

04/30/09 - Record and play back mouse and keystrokes.

Improvements to AutoPlay

As mentioned before on this blog (regarding our UAC changes) and on the IE blog (regarding the SmartScreen® filter for malware), we have an increased focus to enable customers to be in control and feel confident about the software that they choose to run on their computers. Folks on this blog have also commented about the concerns they have specifically in the AutoPlay area. This blog entry addresses some of the changes that we have made to increase customer confidence when using their media and devices with Windows.  It is authored by Arik Cohen, a program manager on the Core User Experience team. –Steven  [Note: There was a technical problem so this post was reposted in its entirety.]

Certain malware, including the Conficker worm, have started making use of the capabilities of AutoRun to provide a seemingly benign task to people – which masquerades as a Trojan Horse to get malware onto the computer. The malware then infects future devices plugged into that computer with the same Trojan Horse. For further information about Conficker please visit http://www.microsoft.com/protect/computer/viruses/worms/conficker.mspx

In the following example for a USB flash drive that has photos, malware registers as the benign task of “Open folders to view files.” If you select the first “Open folders to view files” (circled in red), you would be running malware. However, if you select the second task (circled in green), you would be safe running the Windows task.

Infected USB AutoPlay

People are confused why they have two tasks that appear to do the same thing – and even a knowledgeable person who is careful not to run software from an untrusted source can easily make the mistake of selecting the first task. As a result, people lose confidence and don’t feel in control.

A growing attack

While presenting an AutoRun task in AutoPlay has been available since Windows XP, we have seen a marked increase in the amount of malware that is using AutoRun as a potential method of propagation. According to the Security Intelligence Report, an enterprise study by Forefront Client Security found that the category of malware that can propagate via AutoRun accounted for 17.7% of infections in the second half of 2008 – the largest single category of malware infections.

The chart below shows the increasing amount of detection reports by Microsoft anti-virus software of the class of infections that spread via AutoRun. (Note: The actual method of infection cannot be determined.)

Infection Detections of Malware that Spread via AutoRun

Currently, disabling AutoPlay completely is the only solution for consumers and enterprises to gain confidence with the use of USB flash devices on their computer. Guidance on disabling AutoPlay is available here.

Increasing customer confidence

Windows 7 introduces key changes to AutoPlay that keep you from being exposed inadvertently to malware like Conficker when doing your common scenarios with devices (e.g., get to the files on your USB flash drive, download pictures from an SD card, etc.).

In particular, Windows will no longer display the AutoRun task in the AutoPlay dialog for devices that are not removable optical media (CD/DVD.) because there is no way to identify the origin of these entries. Was it put there by the IHV, a person, or a piece of malware? Removing this AutoRun task will block the current propagation method abused by malware and help customers stay protected. People will still be able to access all of the other AutoPlay tasks that are installed on their computer.

With these changes, if you insert a USB flash drive that has photos and has been infected by malware, you can be confident that the tasks displayed are all from software already on your computer:

Infected USB AutoPlay after AutoPlay changes

On the other hand, if you insert a CD that offers software to install, Windows will still display the AutoRun task provided by the ISV during their media creation process. For example:

AutoPlay for a CD that offers an AutoRun Task

You will first see this updated AutoRun experience in the Windows 7 RC build, and we will be bringing this change to Vista and XP in the future.

Ecosystem Impact

We are working with our ecosystem partners to help mitigate situations where this AutoRun change will have an impact on them.

CDs and DVDs (including CD emulation), where the IHV specified AutoRun task authored during manufacturing, will continue to provide the AutoRun choice allowing customers to run the specified software. IHVs of generic mass storage devices should expect that people will browse the contents of the device to launch any software. The new behavior will allow customers to continue to use AutoPlay (including all Windows and ISV installed tasks) to access their media and devices while not being presented with tasks from malware. Additionally, device classes, such as portable media players and cell phones, now support Device Stage™ on Windows 7. Device Stage offers the IHV a multifunction alternative to AutoPlay where they can present links to software and common tasks, and provides additional features as you use the device.

As you try out the Windows 7 RC, we hope these changes will make you feel more confident and in control when using your media and devices.

-Arik Cohen

How MED-V v2 Helps You Manage Windows XP Mode

The PressPass Q&A we posted today addressed a number of questions around Windows XP Mode. I wanted to clarify in more detail the differences between Windows XP Mode and MED-V and how specifically MED-V v2, a component of the Microsoft Desktop Optimization Pack (MDOP), adds management to Windows XP Mode.

The main facts:

Windows XP Mode is specifically designed to help small-business users to run their Windows XP applications on their Windows 7 desktop.

• Windows XP Mode is available for Windows 7 Professional, Windows 7 Ultimate and Windows 7 Enterprise customers.
• Windows XP Mode combines Windows Virtual PC and a pre-installed virtual Windows XP environment to allow users run many older applications.
• Windows Virtual PC will enable users to launch virtual applications seamlessly from the Windows 7 Start menu.
• Windows Virtual PC includes support for USB devices and is based on a new core that includes multi-threading support.

Microsoft Enterprise Desktop Virtualization (MED-V) is designed for IT Professionals.

• MED-V enables Virtual PC deployment in larger organizations.
• MED-V provides centralized management, policy-based provisioning and virtual image delivery to reduce the cost of Virtual PC deployment.
• MED-V v1 builds on Microsoft Virtual PC 2007 to help enterprises with their upgrade to Windows Vista when applications are not yet compatible.
• MED-V v2 will add support for Windows 7 (both 32 bit and 64bit) and Windows Virtual PC.
• MED-V v2 beta will be available within 90 days of Windows 7 GA.

How MED-V adds management to Windows XP Mode and Windows Virtual PC?

To provide a managed, scalable solution for running virtual Windows XP applications, MED-V addresses many of the IT challenges around deployment and management including:

Deployment – deliver virtual Windows images and customize per user and device settings

• Automate first-time virtual PC setup based on an IT customized script – including assignment of a unique computer name, joining to AD domain
  (for instance: assign the virtual PC a name that is derived from the physical device name or the username to simplify identification and management)
• Adjust virtual PC memory allocation based on available RAM on host, so that the virtual PC does not take significant resources from the user

Provisioning – define which applications and websites are available to different users

• Assign virtual PC images according to users and groups
• Define which Windows XP applications will be available to the user through the start menu
• Define which websites (e.g. internal sites that requires a previous version of Internet Explorer) are redirected automatically to Windows XP

Control – assign and expire usage permissions and Virtual PC settings

• Control the network settings of the Virtual PC (e.g. whether it connects through NAT or DHCP, whether its DNS is synchronized with host)
• Authenticate user before granting access to the Virtual PC
• Set expiration date, after which the Virtual PC is not accessible to the end user

Maintenance and Support - update images, monitor users and remotely troubleshoot

• Update images using TrimTransfer network image delivery – update a master Virtual PC image, and MED-V will automatically distribute and apply the changes to all endpoints
• Centralized database aggregates events from all users, and provides troubleshooting information on malfunctioning virtual PCs
• Administrator diagnostics mode allows faster resolution of Virtual PC issues

Run on multiple platforms – MED-V will work on both Windows 7 and Windows Vista.

Which customers should use Windows XP Mode standalone?

Windows XP Mode standalone is suitable for small and medium business users, who are able to set their XP applications themselves and may or may not have IT Professional staff. Each PC has its own virtual Windows XP environment that is controlled and managed by the end user. Windows XP Mode standalone is not designed for large, centrally managed deployments that have widely deployed business applications that require Windows XP.

So in summary MED-V builds on top of Windows Virtual PC and adds important management capabilities.

How MED-V v2 Helps You Manage Windows XP Mode

The PressPass Q&A we posted today addressed a number of questions around Windows XP Mode. I wanted to clarify in more detail the differences between Windows XP Mode and MED-V and how specifically MED-V v2, a component of the Microsoft Desktop Optimization Pack (MDOP), adds management to Windows XP Mode.

The main facts:

Windows XP Mode is specifically designed to help small-business users to run their Windows XP applications on their Windows 7 desktop.

• Windows XP Mode is available for Windows 7 Professional, Windows 7 Ultimate and Windows 7 Enterprise customers.
• Windows XP Mode combines Windows Virtual PC and a pre-installed virtual Windows XP environment to allow users run many older applications.
• Windows Virtual PC will enable users to launch virtual applications seamlessly from the Windows 7 Start menu.
• Windows Virtual PC includes support for USB devices and is based on a new core that includes multi-threading support.

Microsoft Enterprise Desktop Virtualization (MED-V) is designed for IT Professionals.

• MED-V enables Virtual PC deployment in larger organizations.
• MED-V provides centralized management, policy-based provisioning and virtual image delivery to reduce the cost of Virtual PC deployment.
• MED-V v1 builds on Microsoft Virtual PC 2007 to help enterprises with their upgrade to Windows Vista when applications are not yet compatible.
• MED-V v2 will add support for Windows 7 (both 32 bit and 64bit) and Windows Virtual PC.
• MED-V v2 beta will be available within 90 days of Windows 7 GA.

How MED-V adds management to Windows XP Mode and Windows Virtual PC?

To provide a managed, scalable solution for running virtual Windows XP applications, MED-V addresses many of the IT challenges around deployment and management including:

Deployment – deliver virtual Windows images and customize per user and device settings

• Automate first-time virtual PC setup based on an IT customized script – including assignment of a unique computer name, joining to AD domain
  (for instance: assign the virtual PC a name that is derived from the physical device name or the username to simplify identification and management)
• Adjust virtual PC memory allocation based on available RAM on host, so that the virtual PC does not take significant resources from the user

Provisioning – define which applications and websites are available to different users

• Assign virtual PC images according to users and groups
• Define which Windows XP applications will be available to the user through the start menu
• Define which websites (e.g. internal sites that requires a previous version of Internet Explorer) are redirected automatically to Windows XP

Control – assign and expire usage permissions and Virtual PC settings

• Control the network settings of the Virtual PC (e.g. whether it connects through NAT or DHCP, whether its DNS is synchronized with host)
• Authenticate user before granting access to the Virtual PC
• Set expiration date, after which the Virtual PC is not accessible to the end user

Maintenance and Support - update images, monitor users and remotely troubleshoot

• Update images using TrimTransfer network image delivery – update a master Virtual PC image, and MED-V will automatically distribute and apply the changes to all endpoints
• Centralized database aggregates events from all users, and provides troubleshooting information on malfunctioning virtual PCs
• Administrator diagnostics mode allows faster resolution of Virtual PC issues

Run on multiple platforms – MED-V will work on both Windows 7 and Windows Vista.

Which customers should use Windows XP Mode standalone?

Windows XP Mode standalone is suitable for small and medium business users, who are able to set their XP applications themselves and may or may not have IT Professional staff. Each PC has its own virtual Windows XP environment that is controlled and managed by the end user. Windows XP Mode standalone is not designed for large, centrally managed deployments that have widely deployed business applications that require Windows XP.

So in summary MED-V builds on top of Windows Virtual PC and adds important management capabilities.

Backup4all Portable

04/29/09 - Back up, burn, and track versions of your files.

Backup4all Lite

04/29/09 - Customizable backup.

Backup4all Standard

04/29/09 - Customizable backup files.

Windows Vista SP2 RTM + Windows Vista SP1 Blocker Tool Removed

Today we are announcing the Release to Manufacturing (RTM) of Service Pack 2 (SP2) for Windows Vista and Windows Server 2008. SP2 represents the latest step in Microsoft’s commitment to continuous improvement. It includes all updates that have been delivered since SP1, as well as support for new types of hardware and emerging hardware standards. 

As we have mentioned before, here are some of the key benefits of Windows Vista SP2:

• Windows Search 4.0 for faster and improved relevancy in searches
• Bluetooth 2.1 Feature Pack supporting the most recent specification for Bluetooth Technology
• Ability to record data on to Blu-Ray media natively in Windows Vista
• Adds Windows Connect Now (WCN) to simplify Wi-Fi Configuration
• Windows Vista SP2 enables the exFAT file system to support UTC timestamps, which allows correct file synchronization across time zones.

And since it comes with a single installer for both Windows Vista and Windows Server 2008, SP2 will be easy for IT Pros to manage, deploy, and support. For a complete overview of the changes introduced in SP2 for Windows Vista and Windows Server 2008, check out the notable changes document on TechNet.

Business customers with Windows Vista will find that the transition from Windows Vista to Windows 7 will be significantly more straightforward due to the high degree of compatibility between Windows Vista and Windows 7. If your Windows Vista SP1 deployment is already underway we recommend you continue with SP1 as planned. Then you can deploy SP2 using your systems management infrastructure.  If you are in the early stages of deployment or still planning Windows Vista deployment our best advice is that you plan on testing and deploying Windows Vista SP2. For more, I suggest reading this blog post from Gavriella Schuster in regards to guidance on Windows deployments.

We expect Windows Vista and Windows Server 2008 SP2 to be publicly available in Q2 2009.

As a quick reminder, Windows Vista SP1 Service Pack Blocker Tool is being removed today, as we announced back in January. For customers who previously had the blocker tool in place, Windows Vista SP1 will now be offered to them via Windows Update.

Next Page »