Who you callin' WUS?

Windows Update Services (WUS) is the successor to Microsoft Software Update Services (SUS) and the application Microsoft previously referred to as SUS 2.0. WUS is essentially a free Windows Server add-on that lets small and midsized businesses easily handle patch management for servers and clients. It is due time, cause SUS with its flat architecture and lack of control should have been named SUK.

In addition to the new name, WUS sports a wide range of cool new features. Like earlier SUS versions, WUS provides you with a centralized patch-management infrastructure, which lets you approve then roll out patches to desktops and servers. WUS adds new content download types—including patches for Microsoft Office, SQL Server, and Exchange Server—to the previously supported Windows updates and service packs. WUS includes improved targeting capabilities that let administrators take advantage of organizational units (OUs) in Active Directory (AD) environments or manually created groups in workgroups to roll out patches to the most crucial systems first. The new service also includes bandwidth-management capabilities that let you control patch delivery during peak business hours so that you can ensure your networks won't be overloaded during crucial periods.

One feature that won't be changing is the price—none. Contrary to rumors, and despite all the powerful new features, WUS continues to be a free component of Windows Server. This definitely is something to check out if you do not have a solution already.

Ready or not, Here I come

The inevitable has arrived. If you haven’t deployed SP2 yet, you might want to make plans to or your clients will be sucking up all kinds of bandwidth downloading this one.

Beginning at 12:01 a.m. on April 12, 2005, the temporarily blocking mechanism that prevents the automatic download of SP2 will expire and PCs with Automatic Update enabled will begin receiving SP2.

Santa Monica Trip

I am out of town is sunny Santa Monica right now attending a conference put on by a potential new vendor of ours. Today, we had a session on outsourcing that was presented by Michael Corbett. Michael really had some good ideas on what companies need to do to capture the competitive advantage they seek through outsourcing as well as when and what to outsource. Here is just a taste.

Adopt a Repeatable Management Process for Deciding when to outsource

1. The Idea Stage

a. Question – Is this idea appropriate?

2. The Assessment Stage

a. Question – Is the assessment of need real?

3. Implementation Stage

a. Question – Is the Implementation the right deal?

4. Transition Stage

a. Question – How are we going to execute the transition?

5. Management Stage

a. Question – How do we change operationally after the transition?

The Perfect Valentine Song

I hope that you singing this to your sweetheart has the same impact on Valentines Day that it did me when I sang it to mine. I strongly urge you to sing and use the lyrics below.

Why do you love me?
Why do you need me?
Always and forever
We met in a chat room
Now our love can fully bloom
Sure, the World Wide Web is great
But you, you make me "salvivate"
Yes, I love technology
But not as much as you, you see
But I still love technology
Always and forever
Our love is like a flock of doves
Flying up to heaven above
Always and forever
Always and forever
Yes our love is truly great
Always and forever

From Napoleon Dynamite

Microsoft Beefs Up Free Infection-Removal Tool

Microsoft has released the Microsoft Windows Malicious Software Removal Tool to help remove specific, prevalent malicious software from computers that are running Microsoft Windows Server 2003, Microsoft Windows XP, or Microsoft Windows 2000. The Malicious Software Removal Tool supersedes all virus-cleaner tools that were previously released by Microsoft. You can download the Malicious Software Removal Tool from the Microsoft Download Center. You can also run an online version of the tool from the Malicious Software Removal Tool Web site on Microsoft.com. If you are running Windows XP, you can also run the Malicious Software Removal Tool from the Windows Update Web site or by using Automatic Updates.

Fiorina steps down as HP CEO, chairman

Carly Fiorina has resigned as chairman and chief executive officer of Hewlett-Packard, effective immediately.

As an ex-employee I had to live thru the Fiorina era and am so glad she is stepping down. A company like HP with its storied reputaion and history really took a turn for the worse when she was at the helm. I hope that this sparks a return to the old HP we all knew.

Virtualization

Virtualization really seems like it is moving to the main stream. I see huge benefits for it in development environments, but am looking for other ways to effectively utilize it in the enterprise. If anyone has any thoughts or experience good or bad, I would love to hear from you.

Give Props

As a leader or a manager your success in whatever you do is largely determined on the team that you have working for you. For that reason I think it is very important to take care of those that are taking care of you. I feel that an employee that feels that he is appreciated and is recognized for the contribution they are making to the overall success of the team goes a long way. You will have healthier team, a stronger sense of loyalty, and will in the end make you more successful as well as your business. Write them a note, take them to a movie, send them to a hotel for the night, a lunch, recognize them in a team meeting, whatever it is just do something to show them props.

The Distributed Church

This weekend I had the opportunity to travel to Orlando to see Northland Church in action. It was so cool to see a church that really gets it, and how creatively they are knocking down so many barriers that stand between non-believers and them coming to Christ. They have done a great job of asking themselves “why cant we do that” and have very creatively figured out a distributed church model that really works that is taking the church to all parts of Florida and some overseas.

Terry Storch and I both were both taken back at how these guys really knew their stuff and were making it work. Storch wrote about this as well, and has some more details on how they pull this off technically and what it means to do distributed church on his blog.

Security Task Manager

We ran across this utility the other day while trying to troubleshoot an issue so I thought I would pass it along.

Security Task Manager is an enhanced task manager, that provides advanced information about programs and processes running on the computer. It displays all the standard information, including file name, directory path, description, CPU usage etc. as well as a unique security risk rating. The security risk rating is based on an analysis that takes different aspects of the process into consideration, and indicates the likelihood of the process being potential spyware, malware or a Trojan. This indicator is purely based on generic analysis, and does not use any signature files, so it is open to interpretation by the (advanced) user. Security Task Manager also displays the start time, the icon of the process, hidden functions and more. It can recognize virtual driver software, services and also BHOs or processes hidden from the Windows task manager. You can choose to terminate any process, delete it, or alternately quarantine it, which will disable it from running again without actually deleting it. Overall, a very useful TaskManager for novice and advanced users alike, that provides many unique features.

Information Technology and Volunteers

The proper use of volunteers is a unique challenge within the Information Technology department. There are many challenges that make utilizing volunteers in this area quite a challenge. Using volunteers for outreach is easy, but here there are concerns of confidentiality and risk. Because of this, use great discretion while screening these volunteers which should always include a criminal background check.

The following are areas in which the Fellowship Church Information Technology department utilize volunteers and in what capacity.

Volunteer Areas
1.0 System & Network Consulting
Desc: To help with architecture and design of new systems and network design
Example(s): To help with the planning of the migration from Windows 2000 domain to Windows 2003 domain. To make suggestions for secure firewall configuration if they are security experts.
Notes: Rarely do we allow the volunteer do the actual work in these areas, but more consult and advise in their areas of expertise.

2.0 Research Projects
Desc: Research technologies or products
Example: Researching the best software package to use to track time and attendance. Or what is a good application to use to manage all of our tape backups that is really in-expensive.

3.0 Weekend Preparation & Support
Desc: To help prepare computers and environment for weekend services
Example: Check each computer used for registration or event checkin and ensure that all is working properly. Checking internet connectivity for all ministry computers. Help with any printing or hardware issues that arise on the weekend.

4.0 Event Checkin
Desc: To help facilitate the checkin and/or registration for weekend events with the use of computer terminals and the FellowshipOne application.
Example: To help with children’s department checkin and registration at touch-screen computer terminals. To help with newcomers registration.

Microsoft introduces weblog service

Microsoft's MSN division has launched a test version of a free blogging service aimed at consumers, its first attempt to provide this popular activity for the mass consumer market.

MSN Spaces lets users create an online journal, post photos and digital music lists. Users can establish different levels of visitor access, customize the blog with a choice of different backgrounds and layout templates, and update the blog remotely via e-mail or a mobile phone.

It also features integration with the MSN Messenger instant messaging service and with the MSN Hotmail webmail service.

Jack's Magic Beans

The Magical Jelly Bean Keyfinder is a freeware utility that retrieves your Product Key (cd key) used to install windows from your registry. It has the options to copy the key to clipboard, save it to a text file, or print it for safekeeping. It works on Windows 95, 98, ME, NT4, 2000, XP, Server 2003, Office 97, and Office XP.

It's Part of the Job

Recently God has allowed me the opportunity to share my faith as well as his goodness and grace to friends and fellow Christian brothers in need. I welcome the opportunity to help someone anyway I can, not that I have the answers, but I do have life experiences that I have learned from, and I believe that it is my job to learn from these and to pass the knowledge and lessons that God has taught me from these trials to others.

Isn't that our job as Christians, not to be judgmental of others, but to come to brothers or sisters in love when they are out of line? It kills me to hear recently how some new Christian brothers have tried to do the right thing and surround themselves with believers, but when these baby Christians have started to get off the path, the mature believers say nothing and do nothing. They have instead patted them on the back with things like "it must be tough going thru what you are" but did not use this as an opportunity to talk about how the devil is using these bad events and situations in their lives, to cause them to stumble and sin. True as it might be that these time are tough and it is hard to do the right thing sometimes, these are opportunities to share and to help guide these new Christians. By doing or saying nothing we let the new believers down, our God down and ourselves down. I know its tough sometimes and some of us aren't wired to be very confrontational or even just conversational, but God will overcome this if we allow him to work through us.

What's your IP ?

If you are ever somewhere where you need to know what public IP you are using, ShowMyIP is a handle little utility to get this and a lot more useful information.

IP and Fiber and SANS oh my!

Digital information is increasingly becoming a critical component of the way a church does business today. At Fellowship it has not only continuously grown in volume, but more than ever it must be available around the clock. During this growth, there has been a direct paradigm of volume and availability to the growth of our church. The inability to access data for downtime or system outages has grown to point where we have to make a change in order to meet this growing demand.

Ah, but recognition of the trend and the realization that it is time to make a change, that was the easy part. Now to solve the real challenge of adding to the ever-shrinking or forgotten IT budget, and presented with the real challenge of how do you provide for cost-effective, efficient storage, management, and most importantly, availability of your data?

That’s where we are at Fellowship Church. It has become time to look into a storage area network (SAN) solution. As you probably already know the cost and complexity of a SAN can be quite a frightful undertaking. Do we have the funds? Do I have the staff expertise and bandwidth to manage such a solution?

For those of you that are not so familiar with the technology, here is a little synopsis:
LANs enable multiple PCs to share key IT resources such as applications, servers, shared files, and printers. SANs provide similar resource sharing, but they are specifically designed for servers to share storage devices such as disk arrays or tape libraries.

SANs key benefits:
• Online scalability, so you can easily add storage to meet changing capacity requirements
• High levels of availability, ensuring your data and applications are fully accessible at all times, even during backup
• Centralized data management
• High utilization of disk capacity even during backup or in the event of component failure
• Faster data restoration

There are basically two different types of SANS. There are Fiber Channel and IP SANS. Each of which have benefits, but typically the most cost effective is the IP SAN.

Fiber Channel SANs
· Better performance for transaction-intensive applications such as databases
· Requires specialized knowledge
· More expensive technology
· Super fast and very reliable

IP SANs
· Good for less high performing file/print sharing, Exchange and SQL server apps
· Requires experience with Ethernet (as opposed to fiber channel)
· Less-expensive technology – about 20-30 percent
· Minimum disruption to infrastructure


We have yet to make a decision on what technology we are going to use and who we are going to get it from. But the need is there. We just have to do our due diligence on finding the best solution for our environment and requirements. We are currently looking at solutions from Dell, HP, Xiotech, and StoneFly. I hope to have a solution picked out and being implementation by the first quarter of ’05.

LogMeIn

3am Labs is now offering a new Web-based remote control tool, LogMeIn. The final version, will be available at no cost whatsoever. That's right: Free remote control. Much like Citrix's GoToMyPC, LogMeIn lets you access your PC (or PCs) from across the Internet using no more than a standard Web browser. And thanks to built-in SSL security, you can do so without worrying about interlopers.

The package isn't as robust as a GoToMyPC, though for $12.95 per month you can upgrade to LogMeIn Pro, which includes such advanced features as file and folder synchronization, secure file distribution, and remote-to-local printing.

With a remote control utility, office workers can access their office PCs from the road or their home PCs from the office. But, because they're so easy to install and use, they're often an annoyance to IT managers trying to keep tabs on who's coming through their corporate firewalls. For this reason, 3am also offers a free tool called LogMeIn Scout, which lets IT professionals sniff out the use of Web-based remote control.

Microsoft Network Access Protection

Network Access Protection (NAP) is a policy enforcement platform built into the Microsoft Windows operating system that allows IT professionals to set policy (for example, operating system and antivirus update policy), which restricts clients from accessing a network until the clients can prove policy compliance. The initial release of NAP will be delivered in Windows Server 2003 Release 2 (R2). For more information about Windows Server 2003 R2, see the Windows Server Product Roadmap

Top Vulnerabilities to Windows Systems

The vast majority of worms and other successful cyber attacks are made possible by vulnerabilities in a small number of common operating system services. Attackers are opportunistic. They take the easiest and most convenient route and exploit the best-known flaws with the most effective and widely available attack tools. They count on organizations not fixing the problems, and they often attack indiscriminately, scanning the Internet for any vulnerable systems. The easy and destructive spread of worms, such as Blaster, Slammer, and Code Red, can be traced directly to exploitation of unpatched vulnerabilities.

Three years ago, the SANS Institute and the National Infrastructure Protection Center (NIPC) at the FBI released a document summarizing the Ten Most Critical Internet Security Vulnerabilities. Thousands of organizations used that list, and the expanded Top Twenty lists that followed one and two years later, to prioritize their efforts so they could close the most dangerous holes first. The vulnerable services that led to the examples above Blaster, Slammer, and Code Red, as well as NIMDA worms - are on that list.


The SANS Top 20 Internet Security Vulnerabilities
· W1 Internet Information Services (IIS)
· W2 Microsoft SQL Server (MSSQL)
· W3 Windows Authentication
· W4 Internet Explorer (IE)
· W5 Windows Remote Access Services
· W6 Microsoft Data Access Components (MDAC)
· W7 Windows Scripting Host (WSH)
· W8 Microsoft Outlook and Outlook Express
· W9 Windows Peer to Peer File Sharing (P2P)
· W10 Simple Network Management Protocol (SNMP)

Carbot - The Ultimate Car Toy

CarBot is a car-based computer system designed and built to enhance your driving experience. You can play MP3 files, legal ones of course, check your e-mail and even discover new hot spots around town. Best part is, you can do it all with your eyes on the road with the Carbot audio user-interface.

Now this is something that I would definitely be looking into if I had the scrilla. WiFi remote, 60 gig hard drive, and get this, it even has GPS! For those of you that know a "gadget guy" (and I know we all do) make sure to pass this along.