The Crayon Community!

Welcome to The Crayon Community! Sign in | Join | Help
in Search

Ragnar Harper`s blog on Microsoft technology and security

November 2008 - Posts

  • The Crayon story continues..

    It was made official today that we are starting up Crayon in Germany. As  Crayon has extended the philosophy out to Sweden, Finland and Denmark it has been a huge success. I´m looking forward to continue this strong and great story into Germany. I´m a strong beliver in the Crayon way, and I really belive this is going to be very good. So, all I have to say is ; welcome Germany!!

    You can read more in norwegian here : http://www.digi.no/php/art.php?id=794837

  • Antivirus – for good or bad?

    Then it happened again! Another antivirus update, this time from AVG,  left systems no longer bootable.

    This update deleted a critical file in Windows XP – user32.dll – because it thought that it was infected with PSW.Banker4.APSA or Generic9TBN trojans.

    Quote:

    “AVG has since admitted that the detection was a false positive. " Unfortunately, the previous virus database might have detected the mentioned virus on legitimate files. We can confirm that it was a false alarm," said a company spokesman.”

    AVG has 80 million users worldwide, and its popular thanks to the free version of the software.

    Read more here http://www.vnunet.com/vnunet/news/2230223/avg-update-deletes-critical

  • Powershell v2

    In case you forgot, ofcourse I attended some Powershell v2 sessions at TechEd. After all, I do see Powershell as a very important technology for Microsoft consultants and developers. Jeffrey Snover had a talk on Powershell v2 where he went through some of the investments they do for next version. He also announced that Powershell v2 will relase together with Windows 7 and Windows Server 2008. It will be a native feature on both, and enabled per default. Powershell v2 will also ship on the core edition of Windows Server 2008 R2, but here you need to add the feature (this makes sense, thinking about the reasons for Core in the first place). Jeffrey started his talk about some of the momentum Powershell has gained, and he continued to say he was amazed about the feedback the team got. He even told of someone shrinking his 481 line VBScript to a oneline Powershell. The script outputted HTML, and Jeffrey said the person told him that the HTML outputted from convertto-html was bad, but so was his :) Jeffrey continued to say that in v2 you get much more control of how the HTML output will look.

    Then he discussed the core themes of Powershell v2:

    1. GUI over Powershell
    2. Production Scripting
    3. Universal Automation Enviroment

    He also touched some of the minor improvments that have been asked for a lot, like block comments. (and I love it…), but he also introduced some major enhancements like transaction support, the possibility to have .NET code directly in Powershell (this really is giving us all the possibilities we can think of, for example access to all the native api´s through pinvoke. You can also write the CmdLets in Powershell now, giving you less of a reason to walk into another language. One of the things I really liked was the Mobile Objects Model, giving you the opportunity to serialize objects over time between computers. What this means is that you can program against Exchange 14, Exchange 2007 or whatever without installing the management tools on your Powershell computer.

    Also, the number of native CmdLets is now 574 :) I don´t remember the exact number from v1, but I do think it was just above 100 native CmdLets in Powershell v1. This is not surprising, as in v1 they needed to lay the foundations for Powershell, but in v2 they have a lot of the core infrastructure to build on.

    Way to go! or should I say … highway to Powershell continues! :)

  • Windows 7 Networking enhancements

    I attended a session on Windows 7 networking, and the following is my key takeaways:

    1. VPN reconnect
      1. You can configurere for how long, but having automatic  reconnect when working on VPN is a nice feature. (if you have worked over mobile networks while roaming, or wireless, I guess you also have experienced the need to do VPN reconnect)
    2. Mobile broadband software will be incorporated into the Windows system – no need for thirdparty software to handle the mobile broadband experience
    3. BranchCache
        1. This is way cool feature that caches files from file servers and web servers locally.
        2. Works in two modes – distributed or hosted– distributed is client-to-client, hosted uses a server to host the caching.
        3. Download starts at the file/web server who gives the client a hash of the file, and the client will use the hash to discover if any of his peer clients (limited to the subnet, named distributed cache) or caching server (hosted) have cached the file. This will also make the solution respect the permissions on the file at any given time
        4. The implementation sits on top of the SMB and HTTP protocols – works with for example Office, CopyFile,Explorer,Sharepoint, BITS,Windows Media Player, Internet Explorer osv)
    4. Also enhancements of SMB protocol
        1. Files accessed on file shares are automaticly cached to disk
        2. Subsequent reads to the file share are satisfied from the local cache
        3. Cache is configurable
        4. All transparent to the endusers, providing near local read response times for endusers working over WAN links
    5. Offline folders enhancements
        1. Two-way synchronization at scheduled times (configurable)

    As you see there will be a lot of nice features in Windows 7 and Windows Server 2008 R2. Can hardly wait :)

  • Connecting Active Directory to the cloud

    At Teched I attended a very interesting session about connecting Active Directory to the cloud. The session talked about Microsoft Geneva, Microsoft Services Connector and Microsoft Federation Gateway.

    As we are going through a services revolution with all the things happening in the cloud, identity is going to be an important topic. As we all know and agree upon, we have a lot of different security zones, and islands of identity. This could make identity a barrier, instead of and enabler. So Microsoft is giving us a Federation Gateway, that will act as a hub for federating identity across multiple zones, and create an smooth experience for the end-users. It´s all based on standards (WS-Federation, SAML). The Federation Gateway is a Microsoft service, and you connect to this through Microsoft Services Connector (free, simple connector) or through the Geneva Server (next version ADFS). Both products share the same underlying codebase.

    What happens? For example when the users starts Microsoft CRM in the cloud:

    1. User clicks link to Microsoft CRM on his desktop
    2. He is taken to Microsoft Services Connector , and authenticated and validated against Active Directory
    3. Microsoft Services Connector issues login token(SAML), and redirects to Microsoft Federation Gateway
    4. Microsoft Federation Gateway validates token, and transforms claims before sending to Microsoft CRM online

    User is logged on to the application in the cloud without being asked for credentials.

  • Notes from Teched EMEA, day 1

    After spending some quality time with my fellow collegaues from Crayon, we went to the Keynote.

    Speaker was Brad Anderson, General Manager for Management & Services Divison. The topic for the presentation was dynamic it, described as the key for efficiencies and innovation. Hi went on thank the audience for doing such an important job. And continued the IT-Hero theme that Microsoft has used since the launch of Windows Server 2008.

    Then we were talking about IT Priorities, and how those have changed. The priorities listed this time was:
    Green IT, Virtualization,Cloud Services,Anywhere access,Business Intelligence,Compliance

    How to balance your needs around new capabilities versus cost was also touched, stateing that todays financial crisis might make cost even more important than it have been soo far.

    This naturaly led to talking about how dynamic IT could make IT less a cost center, and more an strategic asset for the company.

    So then we started to talk about virtualization and the offerings from Microsoft. Ofcourse, Hyper-V was the main topic along with Virtual Machine Manager. Brad identified this as the greatest opportunity to drive down cost, both with respect to server utilization as well as power consumption. He also told about the experiences with moving Microsoft.com to Hyper-V, and the result of better utilization and power consumption.

    Alan Goodman gave a demo of Hyper-V and Virtual Machine Manager. He used Windows Server 2008 R2 edition, and showed Live Migration, and PRO features for dynamic allocation host servers. As Windows Server 2008 R2 is in M3 (Milestone 3) release it's quite impressive to see how much is really there.

    Rounding up the talk about virtualization Brad showed a comparision between Hyper-V / Virtual Machine Manager 2008 and VmWare. The price example showed that VmWare was  three times the price of Microsoft. But even more interesting was the feature comparsion for management. This showed that Microsoft actually had more features for management - doing multi hypervisior management, Application Management and physical management.

    The story continued to focus on System Center Operation Manager 2007 R2 version. Brad told us that Microsoft is the largest buyer of servers in the world, and that they build datacenters for the future. I think this shows that Microsoft nows where the management issues are, and that they feel pains and know what the market needs. There was no doubt in my mind that System Center Operation Manager 2007 R2 really gets it. Now also with support for other platforms than Microsoft, thru Cross plattform extensions based on WS-Management. It's also exciting to hear them talk about codename Oslo. But for today I think they did an important announcement about Intelligent Application Gateway 2007 SP2. SP2 og IAG is an Virtual Machine that you buy and use! No need for hardware- you run it virtual :)

    As the keynote was progressing we changed to see some of the new improvments in SQL Server Kilimanjaro. We were showed how easy self-service analysis will be through use of codename Gemini - a product were they showed analyzing more than 100 million rows. And the speed was impressive - thinking about the amount of data that was processed. It¨s no doubt that Microsoft is going to make things easier for the knowledge workers out there working with analysis and reporting.

    Ofcourse a Microsoft keynote today needs to talk about Software+Services. And Brad, as all the other executives from Microsoft, says its about CHOICE. Giving the customer the choice between on-premise, partner hosted or Microsoft hosted. I find this interesting, and I do think that today Software+Service is what we need - much more that only one or the other. This was followed up by an demo of Microsoft Online Services, and more specific Exchange Online. They showed how easy it was to synchronize your on-premise Active Directory with the cloud.

    And everything was wrapped up with an overview of Azure Servies Platform. Giving us an idea about the direction Microsoft is going with cloud computing.

    I think the topics were very interesting for ITPro, and I think Microsoft shows us a very interesting future for Microsoft users :)

    I also attended at session with Steve Riley, and a session about networking improvments in Windows Server 2008 R2 / Windows 7. Stay tuned for more posts :)

Powered by Community Server (Commercial Edition), by Telligent Systems