Category Archives: General Stuff

Cleaning up after classified email

I recently posted about LANL’s email troubles, and that inspired me to write a column about the same topic. Of course, not all of us have classified data actually on our servers.

Continue reading

1 Comment

Filed under General Stuff, Musings

Geek out: Exchange Server 2003 Technical Reference Guide

Wow. 400+ pages of extremely detailed information about Exchange internals. Microsoft says that this guide is “not for beginning administrators”, which means they might as well be posting a big red “READ ME FIRST” on the cover. Most folks don’t like to think of themselves as beginners. Ever wonder which ESM operations use MAPI and which use DAV? Want to know how ESM decides to use DNS or WINS to find the server you want to manage? Curious about exactly what’s in the link state table? This guide will tell you all that, and a bunch more besides. Highly recommended. Here’s a taste:

Continue reading

Comments Off on Geek out: Exchange Server 2003 Technical Reference Guide

Filed under General Stuff, Musings

Microsoft support for VERITAS Storage Foundation

Man, am I glad to see this: an official statement on MS’ support position for VERITAS Storage Foundation. The bottom line is very simple:

To be very clear: Microsoft will provide support for Microsoft Exchange issues if you run Exchange on a VERITAS Storage Foundation platform. However, Microsoft will only troubleshoot and attempt to resolve Exchange-specific issues up to the point that the source of the problem can be reasonably attributed to an issue or incompatibility with VERITAS software. This same principle also applies to other third party products.

Continue reading

Comments Off on Microsoft support for VERITAS Storage Foundation

Filed under General Stuff, Musings

New 15GB iPod: $125

I was in BestBuy yesterday browsing around, and noticed a scratch-and-dent tag on a boxed, on-the-shelf iPod. The tag said “scratches on display; missing headphones and software”. I got them to open the box; sure enough, the screen was badly scratched, and the headphones were missing. There was no price tag, so I was able to talk them down from their original offer of $150. Thus my new iPod (which also came with about 9GB of preloaded music, thankyouverymuch). If I can replace the screen faceplate, I may flip it on eBay, but then again I may not. Yay for returns!

Comments Off on New 15GB iPod: $125

Filed under General Stuff

RSS feeds from public folders

Thanks to fellow MVP Glen Scales, it’s now trivial to create an RSS feed from a public folder. This is very, very cool. Why? Well, for starters, we keep a public folder of security bulletins and alerts from various sources– presto! it’s an RSS feed. Many of my cow orkers who don’t pay attention to public folders nonetheless will read anything that shows up in their aggregator.

Comments Off on RSS feeds from public folders

Filed under General Stuff, Musings

It’s NAP time

No, not that kind of NAP: in this case, Network Access Protection (NAP) Is Microsoft’s name for the network quarantine feature they’re shipping in Windows Server 2003 R2. The NAP white paper makes for an interesting read, but the NAP FAQ might be a better place to start. In brief, NAP works by allowing administrators to set policies (like “system must have version X of antivirus product Y”) or (“system must have patches A, B, and C from Windows Update”).

Continue reading

1 Comment

Filed under General Stuff, Musings

Can ISPs read your email?

Following up on yesterday’s post on Councilman, I found this interesting article at GigaLaw: “Do ISPs’ Policies Allow Them to Monitor E-mail?” At issue: whether ISPs can/should/do have the same kind of “we can monitor you” language in their user agreements as many corporations do in their acceptable use policies.

Continue reading

1 Comment

Filed under General Stuff

The difference between “legal” and “right”

Last week’s column concerned the Councilman decision, in which a US Federal district court seems to say that intercepting email is OK if you’re an Internet service provider. I got a couple of reader emails asking what that meant for private organizations who may or may not want to read employee email. The bottom line, according to my non-lawyerly understanding: the Councilman decision means nothing in that context. Why? Councilman concerned an ISP, not a private company. If your employees have to agree to an acceptable use policy that says you can monitor their email, or if you otherwise put them on notice (e.g. by a statement on your OWA front page), the prevailing legal consensus seems to be that you’re in good legal shape if you do need to monitor email. However, you still need to tread very carefully. If you really want more details, a) ask your legal department or b) buy my book and read Chapter 20, which was written by an actual lawyer with real legal expertise in the field.

Comments Off on The difference between “legal” and “right”

Filed under General Stuff

Mozilla vulnerability timeline

Via my inbox, I found a very interesting blog post that outlines the timeline for fixing the recent shell: vulnerability in Mozilla. I tip my hat to the Mozilla team for their speedy response.. except that they forgot a couple of important things.

Continue reading

1 Comment

Filed under General Stuff

“Working with Exchange Server” Entourage white paper released

Microsoft’s released a white paper on how to make Entourage work with Exchange. That’s good. Unfortunately, some of the guidance in the troubleshooting section is frustratingly generic. For example, check this note: “In an Active Directory or network infrastructure that is heavily secured, Entourage 2004 Exchange clients can experience difficulty in locating the Active Directory global access server and authenticating the user account. Environments where the servers are locked down and the required ports are closed will experience these problems, and Entourage auto-configure might not work.” So, it might not work, but you’re not going to tell me why it might not work, nor what to do about it.

Continue reading

Comments Off on “Working with Exchange Server” Entourage white paper released

Filed under General Stuff, Musings

Yet another information disclosure vulnerability

Information disclosure vulnerabilities can be quite serious, and they often generate lots of press interest. Sometimes this interest is fanned by organizations that make their living selling security advisories. mi2g has definitely been a major force in publicizing some past vulnerabilities, and now they’ve found a new one that has worldwide impact.

Continue reading

Comments Off on Yet another information disclosure vulnerability

Filed under General Stuff

MSDN Product Feedback Center

This is really cool: a new web-based engine for tracking product bugs and feedback for Microsoft products. It will eventually replace BetaPlace (and not a moment too soon IMHO). You and I can now report bugs, not to mention being able to find existing bugs and “vote” for them to raise their priority/visibility. This doesn’t have any direct impact on Exchange, yet, but it’s safe to bet that when Exchange Edge Services hits beta that this will be the feedback mechanism for it.

Continue reading

Comments Off on MSDN Product Feedback Center

Filed under General Stuff, Musings

IMF archive reviewing

Over at the real Exchange blog, Neil posted a note about a cool web-based tool for reviewing messages archived by the Exchange Intelligent Message Filter. Written by Daryl Maunder, the tool is simple to install (create a new IIS virtual directory on your Exchange server, copy the tool files to it, and voila!) and works well. In the comments to that post, the tireless KC Lemson noted another filter, this one a C# tool written by James Webster of the Exchange team. Both work well; I currently prefer Webster’s tool because it shows both the message and the contents of the P2 recipient data, using a sort of preview pane arrangement; I also like the fact that it’s open-source. Maunder’s web-based tool is cool too because you can access it from other machines on your LAN (or via VPN). Either tool is an improvement over the minimal functionality the IMF itself provides for reviewing archived messages– try them both and see which you prefer. (Note to both authors: please, please implement a way to select multiple messages for action– that would be a big help.)

2 Comments

Filed under General Stuff, Musings

The OWAAdmin tool

This week’s column was on the very cool OWAAdmin tool. I neglected to mention that Tosh Meston, one of the developers on the OWA team, mentioned it in his blog– sorry, Tosh.

This tool, which you can install on any Microsoft IIS server that runs version 1.1 of the Microsoft .NET Framework and ASP.NET, lets you remotely administer your OWA servers from anywhere in the organization. Although OWA offers quite a few features, the process of controlling OWA servers has always been a hassle because it depends on the creation of registry keys or values. Every Windows administrator knows how to do that, I know; the problem arises when you want to make configuration changes to multiple machines. Doing so manually is a bother and is even harder when you factor in common security settings that restrict or prevent remote registry access. You can always create your own Administrative Template file and attach it to a Group Policy Object (GPO), but only if you have the proper permissions in Active Directory (AD). Exchange administrators are often dependent on some other person or group to make directory changes.

Comments Off on The OWAAdmin tool

Filed under General Stuff, Musings

PFDAVAdmin for setting public folder permissions

You might consider this an error from the book, but it’s really more of an omission: I never mentioned that you can use PFDAVAdmin to view, modify, and set public folder permissions, including fixing the “invalid windows handle ID” error that we all know and love. The MS Exchange Blog has a good overview piece, and I made PFDAVAdmin the topic of this week’s UPDATE column,

Comments Off on PFDAVAdmin for setting public folder permissions

Filed under General Stuff, Musings