Microsoft's Patch Vital For Windows Server 2000 Users

Microsoft has released an Internet Explorer patch marked 'critical' for download to fix vulnerability issues that is said to have affected around 2 million users.

The browser's flaw allows a Trojan to take over a victim's computer; it then routes it to infected websites.

The Excel vulnerability affects various versions of Microsoft Office, including Microsoft Office for Mac 2004 and 2008. The IE patch could allow information disclosure or remote code execution if a user views a specially crafted Web page.

Of the "critical" patches, Vulnerability in Active Directory Could Allow Remote Code Execution garnering the most attention. Failure to apply the software could allow remote code execution if an attacker gains access to an affected network.

"This vulnerability only affects Microsoft Windows 2000 servers configured to be domain controllers," Microsoft said in its bulletin. "If a Microsoft Windows 2000 server has not been promoted to a domain controller, it will not be listening to Lightweight Directory Access Protocol (LDAP) or LDAP over SSL (LDAPS) queries, and will not be exposed to this vulnerability."

"It's especially critical for an IT shop that has Windows server 2000 domains and domain controllers," Schultze said. "You might not have them for long as any disgruntled employee can rename the files and take control of those assets without this patch."

Schultze said that Microsoft Security Bulletin MS08-063 and MS08-065, while labeled "important," is more than likely critical for a company's security. Both vulnerabilities allow for remote code execution, a favored target of hackers. MS08-063 in particular is dangerous because it impacts the Microsoft Server Message Block (SMB) protocol.

"That's the file- and printer-sharing protocol," Schultze said. "It's the protocol you use to log in and send something to the printer. So, if I go to my S drive and rename those files and give it a specifically long file name, then the moment that I do that, I can own that file server without human interaction. ... It's the first time in a long time we have seen these server-side vulnerabilities."

MS08-065 is a hole in Microsoft's Message Queuing Service (MSMQ) on Windows 2000 systems. The vulnerability could allow remote code execution on Microsoft Windows 2000 systems with the MSMQ service enabled.

Schultze also noted that five of the 11 bulletins posted by Microsoft are addressing vulnerabilities found in Windows Vista and Windows Server 2008. "This really shows us that these operating systems are impacted by legacy code that goes back to Windows 1998 or earlier," he said.

Customers are also being warned about an e-mail sent out by hackers who are posing as a Microsoft security executive.

Source: .informationweek.com/news/security/app-security/showArticle.jhtml?articleID=211200526

Microsoft Home Server

The Small Business Technology blog talks about Microsoft Home Server. While this server is designed for the home, it also will work for the small business that only has a couple of computers.

Home Server fills a niche that previously was not being served. Microsoft does offer Small Business Server and while it is designed for companies with under 75 employees, it is more sophisticated than most starts up need or may need for many years.

One of the nice features in Home Server is that it will monitor the health of your pc and insure that such important items as your security software is up to date. In addition you can set it up to automatically back up files for your pc's every day so that you do not lose any important data.

Another nice feature is that you can remotely access your information. For example say you are on a business trip, you can access reports, invoices, order forms or any other data you might need without having to download everything to your mobile device or laptop.

For small start ups this may be a good tool to deal with your small network until your needs become greater.

source: bizplanhacks.com

Server Support

Established 2004, Server support is dynamic team with a complete package of skilled engineers and consultants from all aspects of the IT industry. We are a leading UK Microsoft Certified Partner offering consultancy services, support and disaster recovery of Microsoft Server technologies. We understand that every business is different and our approach is in such a way that to understand your system first then we will deliver the most suitable package for your organization in all respects. We operate on-site across the UK & over the Internet using secure remote client. We pride ourselves on offering impartial, objective, independent, cost-effective advice. We can help you realise the maximum benefit of your investment in Information Technology.

If your server or PC can connect to Internet, we can connect to you. Most of our services are available remotely to you wherever you are.

This can be extremely advantageous.

An INSTANT response from a skilled Engineer.

Save your time and money by getting better remote support for your network, servers and desktop computers.

We can make a quick assessment of the technical problem and remotely access the server, desktop computer or other devices in order to quickly correct the problem.

Our most requested services requiring quick response is for Exchange server, backup, creating users and define permissions, database and mailbox repair. If your server can connect to the Internet, we can efficiently do this remotely for you.

• No large up front costs.
  
  
• Secure encrypted communication over the Internet using VPN
  
  
• No changes to your servers or PCs - nothing installed except windows configuration.