That train of thought needs to be stopped in its tracks. I have been doing this whole security thing for a long time now. I know what people say – “Microsoft sucks when it comes to security”. I won’t even bother to discuss the fact that it’s not truly entirely Microsoft’s fault. They cannot help that they are so widely used that people want to exploit what they’ve done. I challenge any one of you to create an operating system that is 100% secure. I would stake my reputation on the fact that it is not possible to do.

No, Microsoft isn’t perfect. No, Windows 7 isn’t 100% secure. However, out of the box (without additional protection software installed) it is by far more secure than any previous release that we have seen come out of Redmond. I’ve read on several different sites that the guess is around 90% of previous security holes have been addressed, and are no longer an issue. While it’s not a perfect number, it is darn good.

So what about Windows 7 is more secure? Windows 7 makes remote connectivity to corporate networks seamless, protects data on thumb drives, and offers fewer user account control prompts to bug users compared to Vista. The UAC now allows you to control how many prompts you see, by using a slider bar to make your changes. DirectAccess offers remote workers the same level of seamless and secure connectivity as they have in the office.

BitLocker extends the data encryption features that we first encountered in Vista. It now works with removable storage devices, such as flash drives. A password or smart card that has a digital certificate stored on it can be used to unlock the data. These devices can be used and modified on any other Windows 7 machines, as long as you know the correct password.

Windows 7 also has AppLocker as a feature. This allows computer administrators to control the software that runs on a corporate network. This ensures that only authorized scripts, installers and dynamic load libraries can be accessed by the users. It can also be used to keep software off of the machine that is undesirable.

Lastly, but not least, Windows 7 comes with IE 8, which has many security enhancements:

• SmartScreen Filter – This replaces and expands upon the Phishing Filter found in IE 7.
• XSS Filter – This protects against cross-scripting attacks.
• Domain Highlighting – This puts emphasis on the relevant part of the URL so that you can easily determine the true location of the site you are visiting.
• ActiveX Security – Security for ActiveX is substantially better, and allows for controls to be installed on a per-site basis.
• Data Execution Prevention – DEP is enabled by default in IE 8.

All in all, I have to say that I am thus far very happy with how Windows 7 runs, as well as how secure it is. As I’ve already stated, no operating system is going to be 100% safe and secure… not even OS X or Linux. The only way you’ll get that 100% guarantee is to completely disconnect from the Internet, and never use it again.

What are your thoughts so far on Windows 7 in general, and the security improvements that the folks at Microsoft have come up with?

Some Windows 7 Beta users are reporting crashes when running Windows Update, or installing third party applications (i.e. Java, Flash, and other MSI-based installers). The third-party Windows .msi installer, or Windows Explorer will crash. Microsoft has identified this may be related to a configuration change in the Customer Experience Improvement Program (CEIP) client. If you’ve experienced Windows Update or installer crashes with the Windows 7 beta, try the fix below. If you haven’t experienced Windows Update or installer crashes crashes, there’s no need for the fix. Future installations of Windows 7 after the initial beta will not be affected.

Detailed instructions:

1. Select and copy the following to your clipboard:

reg delete HKLM\SOFTWARE\Microsoft\SQMClient\Windows\DisabledSessions /va /f

2. Click on “Start”, then “All Programs”, then “Accessories”

1. Right click on “Command Prompt”, then click on “Run as administrator”
2. In the UAC prompt, verify that the program’s name is “Windows Command Processor” and then click “Yes”
3. Right click on the “Administrator: Command Prompt” window’s black area, then select “Paste”
4. Press “Enter”, you should see “The operation completed successfully”.

   If you see “ERROR: Access is denied”, please make sure you followed Step 3.

5. Close the “Administrator: Command Prompt window”

This script above simply removes the configuration change, and will prevent future CEIP related crashes. The above fix is permanent, and will only need to be run once.

The full version is intended for IT professionals, and is available only as part of the Microsoft Desktop Optimization Pack for Software Assurance customers. However, you can download a free-trial as part of the Microsoft Diagnostics and Recovery Toolset. After downloading this toolset, install it to find an ISO file containing ERD Commander:

C:\Program Files\Microsoft Diagnostics and Recovery Toolset\erd50.iso

An ISO is a special file that when burned to a CD can create a bootable CD. Windows doesn’t support ISO burning without third-party software. ISO Recorder is a very simple, and free program for creating CDs from ISOs. After you’ve burned the CD from the ISO, simply boot the system from the CD you just created to start ERD Commander. If your system doesn’t boot from the CD, you might have to change the BIOS boot settings (boot order).

A couple of caveats. The trial version of ERD Commander is ERD Commander 2005. The latest version (currently ERD 6.0) is only shipping with the Desktop Optimization Pack. While version 6.0 is Vista compatible, 2005 is not (compatible with Windows NT, 2000, XP, and Server 2003). The  trial period is 30 days. Next time you’re faced with an unbootable Windows XP system, give ERD Commander a try.

Mozilla’s Firefox is funded almost exclusively by Google through a deal that runs through 2011. This agreement defaults Google as Firefox’s homepage, and search. While Mozilla ought to be worried, Google Chrome is an assault on the entire browser market. With 60% of the search market share, Google has plenty of opportunity to promote its own browser. This places not only Firefox, but also Internet Explorer, Opera, and other browsers in it’s crosshairs.

This surprise announcement, has also lead many to wonder if Google might also have its sights set on a bigger target. A Google operating system. Maybe Chrome is Google’s operating system?

Google’s vision of the future includes a cloud computer, where applications are run from the cloud, or Internet. This requires a less sophisticated client that could bypasses the operating system and require only a web browser. Google’s Chrome sets the stage for that scenario. One of the groundbreaking features of Chrome is that each tab is run as it’s own process. That sounds less browser like, and more like how an operating system works. When’s the last time you saw a browser with it’s own task manager? From Google’s Chrome announcement:

…we needed to completely rethink the browser. What we really needed was not just a browser, but also a modern platform for web pages and applications, and that’s what we set out to build.

Is it a browser? Is it an operating system? Further evidence of operating system roots is their decision to rewrite the JavaScript engine. While they could have used the open source code that was already available, they wrote an engine that communicates directly with the CPU, hinting at bigger plans:

Today Chrome requires Windows to run. Linux and Apple versions are planned soon. Google’s Android phone is almost certainly going to run some flavor of it. Could the Google Chrome web browser be a Trojan Horse for Google’s operating system? How long will it be until we see a version of Chrome that boots on your computer without Windows?

Windows Home Server, or WHS, is based on Microsoft’s Windows Server 2003 platform, but has been re-packaged to make it much more friendly for the home user. It uses a simple console interface to provide management functions, such as adding users, configuring backups, and managing shared folders. The typical WHS device is a computer that is connected to your home network and managed through another PC on the network. It’s capable of performing a headless boot, meaning there is no requirement for a keyboard, mouse, or monitor. Because it doesn’t require these devices, it can be tucked into a corner and takes up relatively little room. I have mine sitting in my basement, next to my router. Out of sight does not mean out of mind, however; this system is always running, monitoring the health of your network and helping to keep your critical data safe.

How it Works: As mentioned, the WHS resides on your network and is managed through other PCs. This is done through the Home Server Connector software. When this is installed on a PC, it automatically finds the WHS and creates a connection to it. That computer is then identified on the server, which will list the computer name and operating system, as well as it’s backup status.

You can define a schedule for performing backups. WHS defaults to performing backups between 12 am and 6 am, as that’s typically time period in which computers are not being used. When the server connector software is installed, it automatically configures the PC for backups. Backups will occur if the computer is on, even if it’s in sleep or hibernate mode; the computer will wake up, perform the backup, and go back to sleep. If there are multiple PCs, they will back up one at a time. You can also perform manual backups, and define how long WHS keeps the backups.

Like Sugarsync, WHS gives you options that some of the other backup solutions don’t, notably remote access. User accounts can be created on the server, and remote access capability can be allowed for individual accounts. As part of setting up WHS, you can create a domain name, such as myfamily.homeserver.com. From here, you have access to any computer on your network that is configured for remote access, as well as access to and shared folders on the server. The remote computer access is a big plus, as it gives you access to Outlook (or whatever email program you use) and other programs on your PC, whereas Sugarsync only gives you access to any data you sync online.

A basic WHS configuration includes at least 2 hard drives, which are automatically configured as hot-swappable backups. If one drive fails, the other will still have all the data that has been saved to it. The failed drive can be easily replaced, and WHS will recognize it. Additionally, more storage space can be easily added, which gives a lot of flexibility in expanding your backup space as needed, while also ensuring that your data is safe.

WHS gives several options for recovery. If you only need to recover a folder or files, you can open the appropriate backup and restore it from there. WHS keeps monthly, weekly, and daily backups, and you can choose how long to keep those. It defaults to keeping the monthly for 3 months, the weekly for 3 weeks, and the daily for 3 days, but these can be changed. If you accidentally delete a file today that you need, you can go back to yesterday’s backup and retrieve it. If you realize a month later that you needed something, you can go back to the previous month’s backup and recover it from there.

You can also do a system recovery. If your system files become corrupt or your hard drive crashes, you can boot from the WHS recovery disk and then restore your drive that way. It also saves your drivers in a separate file every time it backs up, so if you ever need drivers, such as during a re-install, you have access to them. Again, this is something that sets WHS apart from other backup solutions, as this is done automatically.

What I Like about WHS: This can easily be a configure-and-forget type of backup system, and the ease of configuring the backups makes it simple. It’s a great solution for a multi-PC household, as each of the PCs can be defined on the server and set to backup automatically. The built-in redundancy adds to the peace of mind you get from knowing your important data is backed up. The fact that you can reach your data remotely is also a plus. Now that I’ve gotten it configured and set up, I don’t have to spend any time managing the server. WHS can download and install updates and reboot as needed, with no intervention from me, and the backups run as scheduled. WHS will monitor the health of your network too, notifying you if a PC hasn’t been backed up as scheduled, checking the health of the hard disks, and monitoring the state of your router configuration to make sure that it is properly configured for remote access.

What I Don’t Like about WHS: I consider myself pretty technical, and I do have experience with Microsoft’s Small Business Server 2003, but I still didn’t find WHS that easy to work with. I installed the OEM software on my own hardware. There is a degree of networking and technical expertise that might put this out of the normal home user’s comfort level, at least during the configuration and troubleshooting stages. Preconfigured options like the HP MediaSmart may be the best option for most people.

This solution is also more of an energy hog; the WHS and all the PCs connected to it must be on in order for the backups to take place, and the best time to run backups is when you’re not using the PCs; this usually means you have to leave all the PCs on when not in use, which is not something I typically do. However, Windows Home Server does offer the option to wake computers up from standby or hibernate to run scheduled backups.

Cost may also be a prohibitive factor for many. If you already have the hardware, the OEM software has a street price of about $150. If you go with the preconfigured hardware and software, I found prices ranging from $450 to $900, depending on the configuration. Finally, this is not a portable solution; if you’re forced to evacuate your house, for example because of fire or flood, you can’t easily pick this up and take it with you. You’d be wise to consider additional off-site backup. While it offers peace of mind as far as recovering from a hard drive failure or accidentally deleting files, it may not be the right disaster recovery solution.

Conclusion: While a Windows Home Server isn’t for everyone, if you have a multi-PC home network, or a home business, this is a robust backup solution. While it can be expensive, the extra features such as remote access and shared folders are added benefits to this choice. We’ll explore all the features of Windows Home Server in another review. If you’re looking for a basic backup strategy without bells and whistles, there are other options that we’ve reviewed that may better suit your needs.

UAC is Microsoft’s User Account Control. It’s a sometimes nagging interface that can help to protect your computer. It has specific rules on what an administrator can and cannot do. When UAC is turned on, the software on your computer is running without administrative permissions. If you or your computer attempts to perform an action that requires administrative privileges, UAC pops up a window asking if you want to elevate to administrator so the action can be completed.

The good – if left on, UAC can be an extremely effective defense against many infections. Most recently proven in a paper by AV-Test.org when they tried to infect a Windows Vista test system with rootkits. Rootkits are the nastiest of infections that work by installing a system driver that hides other infections as they steal your information or ruin your operating system. With UAC turned on, AV-Test couldn’t get any of the rootkits to install. In order to install the rootkits, they had to disable UAC.

The bad – it’s sometimes annoying. Really annoying. Especially when initially setting up a computer. When you install a program, change network settings, and reconfigure many system settings, UAC will always pop up the window, sometimes multiple times, asking for permission.

There are a lot of things that Microsoft can do to improve UAC for your typical consumer. First, rethink what things require administrative permissions. Many things that UAC asks for permission for should not require those permissions. Next, place a time limit on the elevated privileges. Right now UAC promotes the user until the action is over, thus making it necessary to ask multiple times if the first action initiates a second or third action that requires the elevated privileges. Finally, grant the ability to set a timeframe for elevated privileges. If a user is going to be testing network settings or installing a bunch of software, they should be able to tell UAC to promote them for the next fifteen minutes, or half hour.

Windows Vista Service Pack 1 made improvements to reduce the number of UAC prompts. After initial setup, UAC prompts average fewer than two per session. If you’ve had UAC disabled on your system(s) it’s a good time to reconsider. If you decide to enable UAC, tell us about your experience in the comments.

With all things considered, Windows Vista UAC is certainly a step in the right direction. Sure, it can be annoying, and Microsoft can do some things to make it more user friendly. However, it’s far less annoying, and far less costly than getting your computer infected with a nasty rootkit. The results from AV-Test show just how effective UAC can be when left on, even against the nastiest of nasty infections. Is it worth it to click “Continue” every now and then?

Why are there so many people down on Vista? Especially media people? I am so tired of hearing Vista failure! Vista disaster! Vista sux!

I think every one of these people have a very short memory. I have been doing computer support for over 15 years, most of it supporting end users at the consumer level and enterprise level. My first enterprise/corporate task was to upgrade Windows 3.1 computers to Windows 95 for “Outlook” email. I have deployed Windows 2000 and Windows XP as major projects to help corporations standardize their hardware and software platforms. I know the ins-and-outs of the operating systems pretty well.

There are some basic truths to be had. It doesn’t matter how well an OS is designed, tested, and maintained, the user will find a way to break it. The user will always find something doesn’t work (OS compatibility) no matter how much time is spent making sure that compatibility issues are worked out. Lastly, you will not be able to satisfy everyone.

For the consumer, going from Win9x to XP was a huge experience. It was a great step forward in stability, user interface enhancements, hardware support. Still there were new bugs found. USB hardware, especially, had issues. Driver hardware was very lacking. Then there were several security holes found. From the enterprise side, there was a very big issue with blue screen errors resulting from image deployments. Out comes the first service pack for XP, which fixed a large number of bugs and performance issues, including a majority of hardware drivers and many security issues. It wasn’t until SP1 that most corporations started seriously deploying XP.

For the most part, going from Windows NT to 2000 was just as big of an experience for corporate users as was consumers upgrading to XP. However, going from Windows 2000 to XP wasn’t nearly as big a transition. It was a more natural evolution.

Then came the litany of security holes in XP, Internet Explorer, and other Microsoft applications. There began a very big push for security improvements. Service Pack 2 for XP made many changes to the OS including a better firewall, improved Internet Explorer, and many, many security fixes. Out of this came a new mindset regarding a ground up focus on security.

Windows Vista was developed to be more secure and offer a lot more internal enhancements. At this they have been very successful. Looking at our own support forums, though, I see a familiar trend. Users are finding ways to break it. Users are finding things that aren’t compatible. T exact same thing was experienced when XP was released. Slightly different issues and slightly different fixes are required for the same general problems.
Does Vista have problems? Sure it does. Are they anything new compared to other operating system launches? Nope. Been there, done that, bought the t-shirt. Will Vista SP1 fix everything? Probably not. It will go a long way to resolving many of the complaints out there. It will fix a large number of things people want to be addressed.

The only thing I think MS failed at was bringing about enough new technology in Vista to give it the “wow” factor. I know they dropped a number of enhancements for a variety of reasons. I hope in the next iteration of Vista they are able to bring those technologies to the platform.
So to those that are quick to bash Vista for its shortcomings and issues, please take a look in the mirror. This isn’t the first OS to go through this. Please temper your tirades with quiet reflection on OS history.

Dell said they asked consumers for feedback regarding a Linux distribution, and Ubuntu was the overwhelming favorite (followed closely by OpenOffice). Ubunto 7.0.4 will soon be offered and supported (now even on Dell forums) on consumer models. This in addition to RedHat that has been offered for some time to enterprise customers.

Dell promised to listen better to it’s customers, and lunched it’s IdeaStorm website to solicit feedback. Offering a Linux operating system quickly dominated the requests, and many wondered whether Dell had the resources and desire to support Linux. Not to mention offend partners like Microsoft. It appears they are. Kudos to Dell.

Ideas in Action [Dell]

Microsoft is keeping to a plan to stop selling the operating system even though surveys show a lukewarm response to Windows Vista among consumers.

A poll by US market research firm Harris Interactive found that only 10% of those questioned were planning to upgrade to Vista in the near future.

All versions of XP, including those made for media centre or tablet PCs, are affected by the decision.

View: Full Story @ BBCNews

Don’t pay the extortionists at the computer repair shop 800 bucks to get your data back or start up your dead computer. Plenty of free tools can help you and are available for download right now. Today we’ve got our top 10 system recovery picks which span operating systems but all cost the same: exactly nothing.

View: Full Story @ LifeHacker