Microsoft Products
Microsoft Exchange Server Resources
Microsoft Trustworthy Computing
Contact Microsoft
Find Phone Numbers, Support Options, and Pricing Information by Product.
Technical support is available from Microsoft Product Support Services at
1-866-PC SAFETY (1-866-727-2338). There is no charge for support calls
associated with security updates.
Microsoft for Partners
802.1x Authentication on Computers Running Windows 2000
Q313664
Active
Directory Tips
Wayne's Windows 2000 Active Directory Tips.
AnswersThatWork.com
Task List Programs, in most cases, start at the same time as Windows.
Sometimes these programs are useful and need to be there; quite often,
however, they are not needed, and in too many cases they cause severe
problems. Answers That Work publishes pages from their in-house database to
provide guidance on the usefulness of these programs, and removal procedures
when recommended.
Application Files maintained by
Pacman's Portal
A Comprehensive list of startup application executables. Other good
reference sites
lfan.org |
FreeStyle Electronics Laboratories Reference Center |
Greatis Startup Database |
Sysinfo.
Application
Verifier
Available as part of the Application Compatibility Toolkit, the Application
Verifier (AppVerifier) is a collection of tests used during the application
development and testing process. It helps developers identify potential
application compatibility, stability, and security issues. The AppVerifier
works by monitoring an application's use of the operating system, including
the file system, registry, memory, and APIs, while the application is being
run. The tool then provides guidance for source-code level fixes of the
issues it uncovers.
Analyzing Your Applications with Windows Application Verifier -
Secure Windows Initiative
Audit Active
Directory Security by SecurityFocus.com.
Part One
An Overview of Active Directory and Security.
Part Two
Understanding the Security Implications of Active Directory Default
Settings.
Part
Three Understanding LDAP, SASL, and Kerberos in the Context of AD
Security.
Part
Four Keys to the Kingdom - the Configuration Naming Context.
Part
Five A Theoretical Attack on the Multi-Master Replication Scheme in a
AD-Enabled Network.
Automating Windows Patch Management by Jonathan Hassell -
SecurityFocus.com
Patch management could easily be called the bane of every administrator's
existence, the pain in the rear of system management, or that never ceasing
headache that pounds at CIOs everywhere. In this three-part feature article,
Jonathan Hassell discusses Microsoft's Software Update Services (SUS) in
depth, including installation, administration, and maintenance. He also
looks at freeware and commercial alternatives to patch management and why
certain solutions might-or might not-be the best fit for your enterprise. Infocus
Part One
1760 |
Part Two
1762 |
Part
Three 1778
Browser
Parasites by Allentech.net
Parasites "aka" adware, scumware, or spyware.
Dial-Up
Networking Errors by ModemSite.com
DLL
Help Database
This database contains information about DLL files that ship with selected
Microsoft products.
DuoCor XactCopy Backup Disk
XactCopy is an easy to use backup software designed to keep all of your data
and system files up to date and safe. In case something goes wrong with your
disk or the operating system, you can simply boot from the backup drive.
XactCopy uses a second hard disk drive, which is transparent to the
operating system, to store all of your data. Routine updates to the backup
disk of the files that have changed since the last update take less than
three minutes. Replacing lost or corrupted files is faster than any other
restore data method.
Event ID
The Event ID database contains 1,648 event IDs and 277 event sources
provided by 864 contributors, 4,781 submitted events pending validation.
EventID.Net has been initiated by Altair Technologies Ltd in April 2001.
Event and Error Message Center
Microsoft's Events and Errors Message Center. Find detailed explanations,
recommended user actions, and links to additional support and resources.
GIAC Practicals
Windows Security Administrators GCWN
GOTDOTNET.com
The Microsoft .NET Framework Community.
Guide to Security Patch Management Version 1
The Microsoft Guide to Security Patch Management provides concise
information, prescriptive guidance, tools, and templates to help
organizations cost-effectively maintain a secure and reliable Microsoft
environment through the proactive assessment of vulnerabilities and the
application of security patches and appropriate countermeasures.
Technet |
Download Guide
Group Policy Inventory by Microsoft
Group Policy Inventory (GPInventory.exe) allows administrators to collect
Group Policy and other information from any number of computers in their
network.
Harden
the TCP/IP Stack
You can configure various TCP/IP parameters in the Windows registry in order
to protect against network-level denial of service attacks including SYN
flood attacks, ICMP attacks and SNMP attacks. You can configure registry
keys to: Enable SYN flood protection when an attack is detected and Set
threshold values that are used to determine what constitutes an attack. This
How To shows an administrator which registry keys and which registry values
must be configured to protect against network-based denial of service
attacks.
See also HOW TO: Harden the TCP/IP Stack Against Denial of Service Attacks
in Windows Server 2003
Q324270 Windows2000
Q315669 | Windows_Server_2003_Security_Guide.exe (2379
KB) |
TCP/IP Resource |
TechNet DNS Caching, Network Prioritization, and Security |
Threats and Countermeasures Guide |
TCP/IP Exploits and Countermeasures for Windows 2000 Server.
HOSTS
- Blocking Unwanted Parasites with a Hosts File.
How-to Resources by Microsoft
Tackle Common Tasks With These How-to Resources
How-to articles are designed to provide IT professionals with step-by-step
procedures for accomplishing common networking tasks. How-to articles cover
a wide range of tasks and ability levels.
I386.com
Internet Connection Firewall Troubleshooting in Windows XP -
ICF_Tshoot.doc (336 KB)
The Internet Connection Firewall (ICF) feature of Microsoft Windows XP
provides a personal stateful firewall, which provides protection for
computers against incoming traffic from the Internet. This article describes
how ICF works, how to enable it, common problems with using ICF, and the set
of tools used to troubleshoot ICF issues.
Internet Explorer Unpatched Security Holes by
Thor
Larholm
Internet Explorer Update 2/4/2004.
A security update is available that removes support for handling user names
and passwords in HTTP and HTTP with Secure Sockets Layer (SSL) or HTTPS URLs
in Microsoft Internet Explorer. The following URL syntax is no longer
supported in Internet Explorer or Windows Explorer after you install the
MS04-004 Cumulative Security Update for Internet Explorer
832894:
http(s)://username:password@server/resource.ext
If you need to disable the new behavior or use other program
URLs that are opened by objects that call WinInet or Urlmon functions, you
can change the registry values as outlined in
Q834489.
Steps that you can take to help identify and to help protect yourself from
deceptive (spoofed) websites and malicious hyperlinks
Q833786
To try to identify the URL of the current website, use a JScript command in
Internet Explorer.
Caution: Use caution when you type script directly in the Address
bar. Script that you type directly in the Address bar can take the same
actions on the local system as the user who is currently logged on. In the
Address bar, type the following command, and then press ENTER:
javascript:alert("Actual URL address: " + location.protocol + "//" +
location.hostname + "/");
The JScript message box shows the actual URL Web address for the website
that you are visiting.
You can also copy the following JScript code and paste it in the Address bar
for a more verbose description of the website URL:
javascript:alert("The actual URL is:\t\t" + location.protocol + "//" +
location.hostname + "/" + "\nThe address URL is:\t\t" + location.href + "\n"
+ "\nIf the server names do not match, this may be a spoof.");
Inside Outlook
Express
A source of technical information, help and tips for users of Microsoft
Outlook Express for Windows, versions 5, 5.01, 5.5 and 6.
DBXTract utility to repair and extract all mail and news messages from
individual dbx files.
IPSec - Default
Exemptions Can Be Used to Bypass IPsec Protection in Some Scenarios
Q811832
IPSec - Default
Exemptions Are Removed in Windows Server 2003
Q810207
IPSec - Traffic
That Can--and Cannot--Be Secured by IPSec
Q253169
IPSec in Windows
2000 and XP by SecurityFocus.com
Part One
| Part
Two |
Part
Three
iT Showcase How Microsoft Does IT.
Microsoft iT Showcase illustrates How Microsoft Does IT. Direct from
Microsoft's Operations and Technology Group (OTG), iT Showcase provides IT
professionals a unique peer-to-peer insider view into Microsoft's process of
developing, deploying and managing its own enterprise solutions. Find here a
collection of technical case studies and white papers that highlights
Microsoft’s own key business applications, deployment strategies, early
adopter experiences, best practices, and leading-edge initiatives.
ISAserver.org
Java Virtual
Machine
JSI Searchable
Tips / Tricks / Reghacks
JSI, Inc., specializes in selling and supporting Windows NT/2K/XP Platform
Products, both software and hardware. The company was founded by Jerold
Schulman in 1994. Jerold's expertise and contributions to the NT community
have earned him Microsoft's prestigious MVP status. Jerold is also a
WUGNET Technical
Advisor on the Windows NT Compuserve forums.
Kerberos
Authentication - Windows 2000
Keyboard Shortcuts Available in Windows XP Q301583
Keyboard - Windows Logo Shortcut Keys for XP Q294317
Keyboard Shortcuts for Windows 95/98/Me Q126449
Keystroke Navigation in Windows 2000 Q255090
LabMice.net
The "LabMice" are a group of a dozen or so consultants, Administrators,
Hackers, and other hardcore NT nuts. Most are MCSEs. All of them are simply
the best and brightest people at some of America's largest companies. Since
it's original inception in 1999, the LabMice community has grown to include
technology professionals from around the world.
Memory Dump
Keyboard Generated Q244139
Microsoft Download Center
Microsoft
Debugging Tools |
Windows XP Debug
Subcommands
Microsoft Executive E-Mail
Microsoft Internet Explorer Support Center
Microsoft Office
Tools
Office Tools on the Web offering a Clip Art and Template Gallery, Updates,
and Troubleshooting Help.
Microsoft Outlook Support Center
Microsoft Office Support, Updates, and Add-ons
A third-party support site of links to an array of Microsoft Office support,
upgrades, and drivers.
Microsoft Product Support Lifecycle
Inventory your products and check their lifecycle. It is very important to
understand End of Life (EOL) so there are no surprises when you need
support, patches, hotfixes, etc. Active support for Windows 95 ceases at the
end of November 2002. Support for Windows 98 and NT Workstation 4.0 ends
June 2003. After that date you can't even buy support for the product.
Microsoft Security FAQ
Securityadmin.info
Answers to Frequently Asked Questions About Microsoft Software and Internet
Security From the MICROSOFT.PUBLIC.*.SECURITY Usenet Newsgroups by Karl
Levinson, MCSE, CISSP, MS MVP.
Microsoft Security Guidance Center:
Security Topics Index
Microsoft Software Forum
Network
A great source for all things MS, including Service Packs and How To
articles for
Slipstreaming updates like XP Rollup 1 into Windows XP SP1.
Microsoft
Threat Modeling Tool
The Threat Modeling Tool allows users to create threat model documents for
applications. It organizes relevant data points, such as entry points,
assets, trust levels, data flow diagrams, threats, threat trees, and
vulnerabilities into an easy-to-use tree-based view. The tool saves the
document as XML, and will export to HTML and MHT using the included XSLTs,
or a custom transform supplied by the user.
Microsoft
TechNet
Microsoft's primary support site for problem solving, product documentation,
knowledge base, deployment, dll information, and security issues.
MSDN Library
The MSDN Library is an essential resource for developers using Microsoft
tools, products, and technologies. It contains a bounty of technical
programming information, including sample code, documentation, technical
articles, and reference guides. MSDN Seminars and Presentation slides can be
found at
http://www.microsoft.com/seminar/dcc/default.mspx.
MVPs.Org
This is your jumping off point to a number of interesting offerings being
provided for you by a few folks associated with the Microsoft Most Valuable
Professional (MVP) program.
National Security Agency
The NSA provides a wide assortment of
Security Recommendation Guides.
Networking - World of Windows
Networking by J.Helmig
A great FAQ Networking resource for Windows 95/98/Me/NT4/2K/XP.
Network Troubleshooting Windows XP
No Stone
Unturned Series by H. Carvey SecurityFocus.com
A six part series to help determine the nature and purpose of suspicious
files found on NT/2K systems; with reference to Lenny Zeltser's paper
" Reverse Engineering Malware."
PDF |
HTML
Office
2003/XP Add-In: Remove Hidden Data
With this add-in you can permanently remove hidden and collaboration data,
such as change tracking and comments, from Word 2003/XP, Excel 2003/XP, and
PowerPoint 2003/XP files.
Office Recovery
Tools
A web source of data recovery software for corrupted files.
Outlook & Exchange
Solution Center
Slipstick's major activity is researching and solving problems with
Microsoft Outlook and Microsoft Exchange Server.
Outlook 2003 - You Cannot Open AttachmentsQ829982
Port
Numbers - Requirements for Microsoft Windows Server System
Q832017
Port Reporter Availability and description of the Port Reporter tool
Q837243
Port Reporter logs TCP and UDP port activity on a local Windows system. Port
Reporter is a small application that runs as a service on Windows 2000,
Windows XP, and Windows Server 2003. On Windows XP and Windows Server 2003
this service is able to log which ports are used, which process is using the
port, if the process is a service, which modules the process has loaded and
which user account is running the process. On Windows 2000 systems, this
service is limited to logging which ports are used and when. In both cases
the information that the service provides can be helpful for security
purposes, troubleshooting scenarios, and profiling systems’ port usage.
PrcView -
Windows Process Viewer
PrcView is a process viewer utility that displays detailed information about
processes running under Windows. For each process it displays memory,
threads and module usage. For each DLL it shows full path and version
information. PrcView comes with a command line version that allows you to
write scripts to check if a process is running, kill it, etc.
Research Microsoft
Publications
Predominately full-text, a resource of technology research from
1993 - present.
SafeGuard
by Utimaco Safeware
Encryption and Access Control for Laptops and Workstations. SafeGuard Easy
provides total company-wide protection for sensitive information on laptops
and workstations. Boot protection, pre-boot user authentication and hard
disk encryption using powerful algorithms guarantee against unauthorized
access and hacker attacks. SafeGuard Easy is both simple to install and
operates transparently in the background.
SANS Reading Room - Windows 2000 Issues
Featuring 36 articles as of December 5, 2002
Most of the articles posted here have been written by students seeking GIAC
certification to fulfill part of their certification requirements and are
provided by SANS as a resource to benefit the security community at large.
Securing Windows 2000 Server
This Securing Windows 2000 Security Solution reinforces Microsoft's
commitment to Trustworthy Computing through structured guidance to help you
understand, and implement the processes and decisions that must be made to
get secure, and stay secure. This prescriptive solution is aimed at helping
reduce security vulnerabilities and lower the costs of exposure and security
management in the Windows 2000 environment. The detailed guidance focuses on
providing a full lifecycle advice on securing your Windows 2000 Server
environment - risk assessment and analysis, securing specific critical
Windows 2000 server roles, and operating a secure environment after the
initial lockdown phases have completed.
Security
Trustworthy Computing for IT by Microsoft
Recent Security Patches, Security Administration, Hot Fix Central,
Troubleshooting, and Security Resources. See also MS
IT Pro Security Zone |
Security Tools and Checklists |
Security Guidance Center.
TCP/IP Implementation Details - Windows 2000
This white paper describes the Microsoft Windows 2000 operating system
TCP/IP implementation details, and is a supplement to the Microsoft Windows
2000 TCP/IP manuals. The Microsoft TCP/IP protocol suite is examined from
the bottom up. Throughout the paper, network traces are used to illustrate
key concepts. These traces were gathered and formatted using Microsoft
Network Monitor, a software-based protocol tracing and analysis tool
included in the Microsoft Systems Management Server product. The intended
audience for this paper is network engineers and support professionals who
are already familiar with TCP/IP.
TCP/IP - Troubleshoot Connectivity with Windows XP Q314067
TCP/IP Utilities Reference
TCP/IP - Windows 95/98/Me Registry Entries Q158474
TCP/IP
and NBT - Win2K and NT Configuration Parameters Q120642
TCP/IP
and NBT - Windows XP Configuration Parameters Q314053
Techspot.com Guide to Windows Security
This guide covers tips and tricks for different applications which should
make your system more secure as well as less prone to viruses. Although the
guide is mostly aimed at Windows 2000/XP users, people using older version
of Windows should also take note as much of the content here applies to
those earlier versions in addition to the Internet Explorer and Outlook
Express tips.
Third-Party Tech
Support Sites:
Techadvice.com -
Computing.net -
Freetechsupport.com
Tips Dr.com
TweakXP.com
Windows 98 & Me Error Message Resource Center Q315854
Windows 98 & Me Hardware/Device Troubleshooting Resource Center
Windows 2000 - Deployment Planning Guide
The Deployment Planning Guide provides important planning and technical
product information to assist teams in charge of deploying Windows 2000
Server and Windows 2000 Professional.
Windows 2000 -
FAQ Security Technologies
Windows 2000 - How It Works
Communications & Networking - Directory Services - File & Print Services -
Management - Security - Storage - Terminal Services - Web & Application
Services - Windows Clustering Technologies - Hardware - Core Windows
Technologies - Training. These resources provide in-depth technical
information to help you better understand and optimize the Windows 2000
operating system.
Windows 2000 -
Management Services Step-by-Step Guides
Find out how Windows 2000 Server management services and tools support
end-to-end network administration, automatic software deployment, and
integration of custom tools and services.
Windows 2000 - Resource Kit Tools
Windows 2000 Security Checklist by LabMice.net
Windows 2000 Security Configuration
Guide
This document provides guidance to allow for the secure installation and
configuration of Windows 2000 in accordance with the Windows 2000 Common
Criteria Security Target (ST). The Windows 2000 Common Criteria Security
Target provides a set of security requirements taken from the Common
Criteria (CC) for Information Technology Security Evaluation.
Windows 98 Support Center
Windows Me Support Center
Windows NT Server 4.0 Support Center
Windows 2000 Support Center
Windows XP Support Center
Windows 2000 List of TCP and UDP Port Assignments
Windows 2000 List of Domain Controller Default Ports Q289241
Windows Deployment and Resource Kits
Windows
Hardware & Driver Central -
BootVis Tool for Windows XP
BootVis.exe is a performance trace visualization tool for use with Microsoft
Windows XP systems. This tool is intended for hardware developers and
manufacturers of PCs and PC peripherals only.
Windows Guide Network
The Windows Guide Network provides technical resources and support for
tweaking, managing and securing the Windows operating system using the
registry, scripting and security.
Windows IT
Library
Windows IT Library, a member of Windows & .NET Magazine Network, gives you
free access to books and other technical content online. Our goal is to
provide Windows IT professionals with an authoritative technical reference
library that helps them do their jobs better. The Library is the place for
Windows IT professionals to come when they need to: research a problem,
learn something about a topic, build a new skill set, study for an exam.
WindowSecurity.com
- Your complete Windows Security resource.
Windows security site which provides Windows security news, articles,
tutorials, software listings and reviews for information security
professionals covering topics such as firewalls, viruses, intrusion
detection and other security topics.
Windows Server 2003 Network Access Quarantine Control White Paper
Q818747
Windows Server 2003 Technical Overviews
Windows Server 2003 Security Guide
Windows Server 2003/XP Threats & Countermeasures Security Settings
Windows XP - Anti-Spy
Windows XP Fix.com
Windows
XP From A to Z
Windows XP - Bink's site
A third-party XP site offering news, tips, downloads and information on
Windows XP.
Windows XP Pro Command-line Reference A- Z
Windows XP Professional - How-to Articles for IT Pros
Windows XP Professional - Technet
Resources, HowTos, and Communities for the IT Pro
Windows
Service Pack 2 Developer's View
Windows
XP Wireless Security Update (WPA)
Windows Problem
Solver by Hans-Georg Michna
Windows and Office
Tips by Jim Boyce
The legendary Jim Boyce has authored and co-authored about 50 books in the
past decade and is a renowned expert with operating systems and business
productivity software. This is one of the best resources on the Internet for
Windows and Office Tips and his
books are essential
for any technical library.
Windows Troubleshooter
The most comprehensive Windows troubleshooting sites on the Web with easy to
find and follow guides to solve most any Windows Operating System problem.
Windows
Update Catalog
Win32
Assembly Language
Win32 Assembly Tutorials and Source Codes.
Win2000mag
The market leader since its launch in 1995, Windows & .NET Magazine explores
the issues that are central to infrastructure growth and evolution. We
combine strategic insight and analysis with hard-hitting tactical guidance.
Our essential and substantive content offers unique, practical information
that enables corporate buyers and IT professionals to evaluate and deploy
business-critical solutions throughout the enterprise. Innovations that
change the way IT professionals work-such as .NET-bring inherent challenges;
Windows & .NET Magazine helps its readers plan for and meet those challenges
every day.
W2Knews
Sunbelt W2Knews is the World's first and largest e-zine designed for NT/2000
System Admins and Power Users that need to keep these platform up & running.
Every week we get you pragmatic, from-the-trenches news regarding NT/2000
and 3-rd party System Management Tools. W2Knews will help you to better
understand NT/2000 and pass your Certification Exams. You will get breaking
news like new tools, service packs, hot sites, or warnings about killer
viruses via W2KNewsFlashes. Sunbelt Software is THE NT/2000 e-business
system tools site.
WinXPnews
WinXPnews is the world's first and largest weekly B2C-zine uniquely focused
on the many millions of new Microsoft Windows XP users. Sunbelt Media
Services launched this electronic newsletter as a sister publication to its
existing blockbuster e-zine W2Knews which has 500,000 subscribers:
specialized IT network- and system managers.
XP TuneUp
This site brings you tips, tricks, and how-to's on fine tuning system
performance for Windows XP. Find solutions for slow boots, internet/network
speed, Windows XP customization, security, and many common XP problems.
Windows XP Service Pack 2
-
A Developer's View
This
MSDN paper discusses some of the security technologies that
Microsoft is introducing to improve Windows XP-based computers' ability
to withstand malicious attacks from viruses and worms, even if the
latest patches or updates are not applied. See also TechNet
RC1 Preview,
Changes to Functionality in Service Pack 2 and a Third-party
Analysis by Steve Friedl
Unixwiz.net.
Download Windows XP SP2.
Programs that stop working after installing Windows XP SP2 MS KB
Q842242.
Xteq - Home of X-Setup
Xteq X-Setup is a so-called "hacker" or "tweaker" program. It allows you to
change settings that are normally hidden deeply in some configuration-files
like the registry fast and easily. Xteq Systems is a team of ordinary people
dedicated to create, develop, improve, test and promote software, add-ons,
tips and fixes, with the main goal of Do More Faster! Their flagship
product, Xteq X-Setup, is constantly updated and delivers unreachable system
tuning power to nearly a million desktops worldwide - at an also unreachable
price: it's free.
Yale University Security Guides
|
