Give it a read.

Configuring MaxConcurrentAPI for NTLM pass-through authentication

This morning I had the opportunity to go on site at a small non-profit organization and observe their experience upgrading from Windows XP to Windows 8 Consumer Preview on one computer – hey, they only have five computers, so this is upgrading 20% of their infrastructure! They plan to test it out for a couple of weeks and then upgrade their other computers. When I go on site I am purely an observer, asking questions and watching. I specifically do not provide answers, although I might provide a hint or a short cut if I watch someone struggling for a considerable amount of time. This is because my job at Microsoft is to write content and I need to know the different steps people take to figure something out.

When I first started working with the new Windows 8 interface, I was very confused and disconcerted. I feared that I had gotten too old to work in tech!  I daydreamed of retreating to open my own book store and never touching a computer again!

But I overcame my fears and learned to love the new interface. It is much faster and cleaner than the previous versions and I actually felt more productive writing, responding to mail, and doing research when I was using my test computer running Windows 8 Consumer Preview than I did on my standard Windows 7 computers.

My customer visit this morning brought that experience back to me as I watched them interact with the Metro user interface for the first time. Their first question to me – How do I change back to “classic” mode? I told them to give it a chance, and that there is no “switch to classic mode” setting in the Control Panel.

Account settings were also confusing and being able to set up administrative access correctly took longer than it should have. I definitely will be looking into creating content for that topic!

After a lot of How? Where? What? experiences, the customer was flying along using Windows 8 Consumer Preview. It took him about 75 minutes to become comfortable with the new interface. By the time I left, he was enthusiastically talking about how much faster he could do his tasks on Windows 8 Consumer Preview than he could on Windows XP.

If you are going through similar experiences, be sure to visit the Windows 8 Consumer Preview and Windows Server "8" Beta Forums and tell us about them. We writers are lurking about looking for content ideas and answering questions!

Wishing you a productive day, today and every day!

Starr Andersen |Senior Technical Writer| WSiX

http://technet.microsoft.com/en-us/windowsserver/ff843381

You can also download the ZIP file (set of three DOCs) from the link below:

http://gallery.technet.microsoft.com/A-Solution-for-Private-67209ab1

These papers will guide you through the design of private cloud security, the understanding of the security blueprint and the secure service operation of a private cloud. Feel free to leave your comments and feedbacks, they are very important to us.

So, want to see what services are running on your machine?

In PowerShell here’s how to do it: From the PowerShell console run, Get-Service.

That’s it. Lists all the services installed on your system. And with an extra bonus helping of service status: running, stopped, paused, along with some pending states.

Want to see more about using PowerShell to look at security features? Take a look at the Task-Based Guide to Windows PowerShell Cmdlets.

More fun with PowerShell coming soon to a blog near you.

Judith Herman
Senior Technical Writer
(Likes to play with Group Policy , Command-line tools and Windows PowerShell)

AppLocker was introduced as the better tool over Software Restriction Policies in Windows Server 2008 R2 and Windows 7. AppLocker content was developed to provide both conceptual and procedural information before the product was widely deployed. As we hear feedback from deployments, writers update that content to promote greater success. Over the past year, here's what has been updated:

• Understanding the Publisher Rule Condition in AppLocker - http://technet.microsoft.com/en-us/library/ee460943(WS.10).aspx
• Frequently Asked Questions - http://technet.microsoft.com/en-us/library/ee619725(WS.10).aspx
• Security Considerations for AppLocker - http://technet.microsoft.com/en-us/library/ee844118(WS.10).aspx
• Troubleshooting AppLocker - http://technet.microsoft.com/en-us/library/ee791895(WS.10).aspx
• Top KBs
• 2532445 You can circumvent AppLocker rules by using an Office macro on a computer that is running Windows 7 or Windows Server 2008 R2 - http://support.microsoft.com/default.aspx?scid=kb;en-US;2532445
• 976922  The "Run only allowed Windows applications" Group Policy setting displays no entries on a computer that is running Windows Vista, Windows Server 2008, or Windows 7 - http://support.microsoft.com/default.aspx?scid=kb;en-US;976922
• 2384558  Inheritance of ownership in Group Policy Management Console does not work as expected - http://support.microsoft.com/default.aspx?scid=kb;en-US;2384558

In the case of the Windows implementation of Kerberos authentication, the basic conceptual content was written in 2005. We have been posting changes with each release in the form of What's New or What's Changed. Additionally, we add to the documentation set as issues or specific deployments are brought to light. This work for deployed releases is then evalulated for upcoming content - either folded in to the foundational doc set, updated in place, or left to stand as a one-off topic. Here's what we did last year:

• Changes in Kerberos Authentication - http://technet.microsoft.com/en-us/library/dd560670(WS.10).aspx
• Kerberos Interoperability Step-by-Step Guide for Windows Server 2003 - http://social.technet.microsoft.com/wiki/contents/articles/kerberos-interoperability-step-by-step-guide-for-windows-server-2003.aspx
• Top KBs relevant to Windows Server 2008 R2
• 978055  FIX: User accounts that use DES encryption for Kerberos authentication types cannot be authenticated in a Windows Server 2003 domain after a Windows Server 2008 R2 domain controller joins the domain - http://support.microsoft.com/default.aspx?scid=kb;EN-US;978055
• 975363  You are intermittently prompted for credentials or experience time-outs when you connect to Authenticated Services - http://support.microsoft.com/default.aspx?scid=kb;EN-US;975363
• 2002013  Troubleshooting Active Directory operations that fail with error 5: Access is denied - http://support.microsoft.com/default.aspx?scid=kb;en-US;2002013

Eric Mitchell

Senior Technical Writer

Windows iX IT PRO Security Team

• Protecting you from malware
• Protecting the pre-OS environment with UEFI

After finishing reading those posts, make sure to also watch this great presentation about UEFI that was delivered during BUILD Conference:

What’s New on the TNWIKI World?

Recently the TechNet Wiki Ninjas put together a new blog to get more in touch with the community, by sharing updates and trends in the Wiki space. Make sure to visit them at http://blogs.technet.com/wikininjas and find out why you should start contributing with the TechNet Wiki.

Last but not least there is one new article that was published last week at TechNet Wiki that I’m sure you will enjoy, mainly the WSUS Admins. Long time ago we had a piece of content explaning how to deploy updates using WSUS for remote clients through ISA Server 2004. This content was never updated for ISA Server 2006, neither it was for Forefront TMG 2010. This is past, now this content is up to date and will allow you to publish WSUS 3 SP2 via Forefront TMG 2010 SP2. Best of all? Now this resides at TechNet Wiki and as the product evolves the community will have a chance to contribute with the article by enhancing it and perhaps even adding new sections (such as Troubleshooting). The article is called Publishing Windows Server Updates Services (WSUS) 3 SP2 through Forefront TMG 2010 SP2.

Enjoy it!

Just a quick update to let you know that this week we released two new articles at TechNet Wiki:

• Deploying Windows Server Updates Services (WSUS) 3 SP2 on a DMZ protected by Forefront TMG 2010 SP2
• Unable to Download Updates from WSUS, Error 0x8024402c

Besides that, we made a small change on the Windows Server Update Services Learning Roadmap Community Edition by adding a link to a slide deck from TechED 2009 about WSUS.

We just want to announce a small change on the WSUS Home Page:

We added a link to the WSUS Learning Roadmap, which is a community based content on TechNet Wiki. What else do you want to see on the WSUS Home Page? Let us know by writing a comment on this post.

Looking forward to hear (read) your feedback!