SMS Extended Security Update Inventory Tool

Microsoft has released another security update inventory tool for SMS 2003 called the Extended Security Update Inventory Tool.  This inventory tool is intended to detect, download and deploy updates that are not detectable by the SMS Security Update Inventory Tool that relies on the Microsoft baseline Security Analyser.  The new ESUIT is built on another new release, the Enterprise Scan Tool.
 
It looks like the tool will work on SMS 2.0 SP3 and SMS 2003

Microsoft RTM’s First Forefront Products

This is a busy news day.  There’s loads of stuff in my inbox and RSS feeds this morning.
 
I didn’t see any big announcements but last week, Microsoft released the first two of it’s Forefront branded products to manufacturing.  The Forefront brand will be applied to all of Microsoft’s security products.  The first products are Microsoft Forefront Security for Exchange Server and Microsoft Forefront Security for SharePoint.  These are results of the Sybari acquisition a year or so ago.  Microsoft Forefront Security for Exchange Server is the successor to Microsoft Antigen for Exchange which was only released late last Summer.  Considering how short the beta program was, I’m doubting that much has changed … we probably just have added support for Exchange 2007.  In fact, almost nothing had changed in the Microsoft Antigen release since the last Sybari Antigen release… mainly the Enterprise Console was replaced.
 
I’ll let you read the features of the Exchange and the Sharepoint products for yourself.

Operations Manager RC2 Available

I just got a mail from Microsoft that says that System Center Operations Manager 2007 (MOM 2007) RC2 is available.  You can download it from the Connect website.

I really liked MOM 2005.  I had it running on a production network to monitor some key and troublesome servers while it was still a release candidate.  When we evaluated monitoring products I found that were was no alterniative in my mind once I saw what it was capable of.  We knew when something went wrong before the users or even the branch administrators knew.  Partnered with SMS 2003, MOM 2005 gave us complete knowledge of what we had and how it was performing.

OM 2007 takes MOM 2005 to another level.  OM 2007 views your network from the ITIL point of view, i.e. your network is a series of business services that are comprised of infrastructure and application components.  This end to end monitoring can be modelled to accurately represent your organisation.  This modelling will then be used to feed performance, fault and reporting information into other System Center solutions.  This is all part of the Microsoft Dynamic Systems Initiative (DSI).  OM 2007 takes knowledge of what you have in the form of a model and provides you with information on how it is performing.  You can expect to see the elements of DSI in all System Center products.

I strongly urge anyone who is seeking a monitoring solution or who is firefighting their network to check out MOM 2005 and OM 2007.

New WSUS Categories

The WSUS team briefly mentioned that the Firewall Client for ISA Server has now been added as a new product under the ISA category.  This will allow Microsoft and you to control the updates of this product as and when required.

I’ve personally not seen anyone in Ireland (that is not using SBS or a single server) that is using ISA as a firewall.  So, it goes without saying, that I’ve not seen the Firewall Client being used outside of a lab environment.  Even then, I prefer to keep things simple and not use it.

The team also mentions that SMS 2003 and Visual Studio have been added.  More sub categories will be added to VS.  The SMS category includes SP2 for SMS 2003, something you will need to go to 2003 R2 and maybe for CM 2007 compatibility.  The category is also there to support swusscan2.cab.  This will allow SMS 2003 Inventory Tool for Microsoft Updates to detect and deploy updates for SMS 2003.

Speaking of SMS 2003 R2: check out my documents/guides/whitepapers on the Inventory Tool for Custom Updates and the Scan Tool for Vulnerability Assessment.

MS Word Security Updates: Whoops!

I was wondering what the story was with Microsoft not including any fixes for the very recently acknowleged flaws that have been found in Microsoft Word.  It would appear that Microsoft are still testing the updates and had deliberately not included them in the Patch Tuesday releases.  However, it looks like someone let test versions of the updates get out into the wild by posting links to them.  Microsoft’s Security Respnse team is urging anyone who has installed these updates to remove them ASAP.  They are only test versions so MS cannot verify that the updates are safe in a prodution system.
 
It appears like the updates were not uncluded in Microsoft Update.
 
Credit: Bink.