Silicon Shecky

I tend to read a number of blogs, especially tech ones, and some I love to read. The SBS Diva is one of my favorites. This MVP has some great insights on the Microsoft Small Business platform, and usually is fun to read. Of course there are moments which make me go Hmmmm… when reading her posts.

She made a very elequent post about change as it relates to SBS 2008 compared to SBS 2003, and how we have to sometimes bite the bullet. Yes, a lot of the changes in SBS 2008 we asked for. The Vista interface, Needing to run everything in elevated mode, and some other items like that we did not ask for.

Yes change happens, but do we not still have a right to complain about what we don’t like? I would say we do, cause without those gripes, how would the next version become any better?

Also, if you read the post, make note of her thoughts on Microsoft’s backup system. Personally, I will not use it outside of maybe a test environment, mostly because I’ve found in the past that it never quite works as easy as it should. For me it is more along the lines of having been burned by Microsoft Backup one too many times.

Anywho, I do recommend checking her blog out, as she updates it frequently, and it has a lot of good information. Plus, if you can get into commenting on it, it can create some really good discussions.

So here it is, the second Tuesday of March and we all know what that means. Yep Microsoft Patch Tuesday! So lets ee what good old Microsoft has patched up for us this month.

The only Critical is a Windows Kernel update, which is patching a hole that, “could allow an attacker to take complete control of your computer if you view a website, email, or document that contains an evil graphic or picture,” according to Eric Schultze of Shavlik Technologies.

Now we all know that a hole in the kernel is bad, and the way this is made to sound this hole can be even worse than other kernel hole, but still I would recommend installing the patch in a test environment first if possible, or at least on a non-mission critical machine. Something about making changes to the Kernel always make me a little leary.

Then there is a series of 4 patches for DNS. Not surprisingly these are for lesser used holes along the Kaminsky DNS attack lines. Definitely get these installed especially with some of the odd ways some viruses seem to be showing up from spoofed DNS.

Finally a patch related to SSL spoofing. Again important, but like the DNS patches, not listed as critical.

Personally, all the patches seem to adress some very serious issues. How SSL and DNS spoofing are not thought of as critical for patching is beyond my comprehension though. At least Microsoft did patch them. Now where is the Excel patch for a major hole in that program?

Mike

So this week has been an interesting week for me from an install standpoint. I got to load up from scratch my first Windows Server 2008 machine, and let me say that I am actually impressed.

The machine is going to a remote office, and needed to be laoded upto be a DC and file/print server on a Windows 2003 SP1 network, which I thought would make life interesting. Usually you find all sorts of odd things when integrating different Server OSes. Not as much in this case.

Active Directory was going to be my biggest worry, yet once I ran the adprep off the 2008 disk on the 2003 DC, everything jsut slipped right into place. The wizards that 2008 uses are fairly simple and straight forward, and did a great job of promoting the server.

The other item of big importance was DFSR for file replication and again, the install and setup of it was amazingly simple.

Yes, 2008 uses that darn Vista GUI, and yes I still don’t like how exploring files and folders (especially the network) is set up with it, its a small, superficial complaint to the ease of 2008. After install I found that 2008 booted faster than 2003, and was just as capable of a server OS. The other complaint I have about it is that it is too simple. I did not see a chance to customize my install initially, which I would like to have the option of.

The whole install and configuration took me 1 day and the file data replicated overnight easily, bringing all the NTFS security information with it.

Honestly, as much as I think Microsoft gets a lot wrong, so far I would say the did something right with server 2008.

Keep watching as my test server finally came in and I am going to be doing a review of SBS2008, installing from scratch soon.