Archive for September, 2010

Published Actions to stop or allocate Stuxnet Worm

Tuesday, September 28th, 2010

Several investigation have been done and finally there are some URLs and IPs which have been contacted during Stuxnet Worm attacks.


through TCP Port 80 (HTTP).

The majority of communicaton contained the string "66a96e28"


Running, Filtering and Saving Scans in Best Practise Analyzer

Saturday, September 25th, 2010

Who knows the Best Practise Analyzer for Exchange (ExBPA) is already familiar exporting scan results to other file formats to save or achive. The Best Practise Analyzer (BPA) coming with Windows Server 2008 R2 Server Roles doesn’t have this opportunity to save the scan reports form the Server Manager Console.

But if you use PowerShell for BPA, you can export your scan report to advanced HTML. There are detailed articles on TechNet describing all the functions and options you have with BPA on Windows Server 2008.

Details here


Default Settings for Exchange Virtual Directories

Thursday, September 23rd, 2010


Exchange 2007

and for

Exchange 2010


More Performance with SMBv2x on Windows and NetApp

Wednesday, September 22nd, 2010

NetApp has prepared an interesting performance test with new SMBv2.x available with Windows 7 and Windows Server 2008. The NetApp OnTap operating system has already been updated to support SMBv2.

Find here the result figures about performance increase with SMBv2.x


Exchange 2010 SP1 now supported on Forefront TMG 2010 SP1

Tuesday, September 21st, 2010

As you remember, I stated out in one of my last blogs that you should not install Exchange 2010 SP1 on your TMG 2010. Read my article here.

Now there is a new Update 1 for TMG 2010 SP1 which now enables you to install Exchange 2010 SP1 on your TMG without an issue.

The Update 1 for TMG is available on Windows Update.


Microsoft Communication Server is now Lync Server 2010

Monday, September 13th, 2010

The upcoming new Communication Server 14 (CS14) will be named Lync Server 2010 based on latest information.

For planning support, Microsoft release the

Microsoft Lync Server 2010, Planning Tool Release Candidate (RC)

What’s New in the Planning Tool for Lync Server 2010?

The Planning Tool now estimates the amount of bandwidth you may require for your WAN for audio and video conferences for each central site.

The Planning Tool now invites you to participate in helping make the planning tool better.

You can view your edge network diagram and enter FQDNs and IP addresses and view the certificates, DNS settings, and firewall settings for your edge network in the central sites when using DNS Load Balancing for Edge Servers. You can also import this information to Topology Builder.

The Planning Tool is supported on Windows 7 (32-bit and 64-bit)

You can export your topology file to Topology Builder for a faster, easier Lync Server setup experience

You can export the global topology, with its corresponding branch offices, as well as the number of concurrent calls connecting each data center to the PSTN into the Microsoft Visio drawing and diagramming software. The Visio output contains improved drawings for each of the site topologies.

The Planning Tool exports a list of the hardware for all sites, including branch offices, to a Microsoft Excel worksheet

The Planning Tool accommodates more supported topologies for Enterprise Voice and dial-in conferencing.

Navigation between topologies and server information has been improved.

You can resize or maximize the Planning Tool window to better accommodate your screen resolution.

The Planning Tool provides a menu bar and a toolbar for available actions.

The Planning Tool incorporates new Microsoft Lync Server 2010 features and topology recommendations.

Users are now evenly distributed among the Front End pools.

Win7 and Windows Server 2008 and R2 SMBv2 and v2.1 and Riverbed

Monday, September 6th, 2010

Who designs distributed network infrastructures with high bandwidth connected sites and accelerates traffic with Riverbed appliances will loose many nice communication features comming with WinVista or Win7 and Windows Server Systems 2008 and 2008R2.

One of the known features in communication between Windows Vista or Windows 7 and Windows Server 2008 or 2008R2 devices is SMBv2.0 or SMBv2.1.

The ‘old’ SMBv1 has been designed centuries ago when 10MBit Ethernet infrastructure was common. It delivers by design maximum of 10 MByte/s data throughput, so even when Ethernet infrastructures reached 100MBit bandwidth, you could easily use maximum SMBv1 delivers.

With Ethernet infrastructures based on high bandwidth, faster protocols are relevant.

So with SMBv2.0 or SMBv2.1 it can be possible to reach a few hundreds of MByte/s data throughput when both devices supporting this.

But if your devices are behind connections which supposed to be fast because you implemented Riverbed appliances, you will possibly fail.

Not only that Riverbed currently doesn’t support SMB Digital Signing, if it is not a member of the Windows domain the client and server belong to, but the Rivebed appliance only support SMBv1.0.

And not worse enough. If there is a pre-existing SMBv2 CIFS session that pre-dates activation of the Riverbed, then the Windows client will cache the fact that it is using SMBv2 session with that particular Windows 2008 server.  There is nothing the Riverbed applicance can do to force that Windows client to use SMBv1 for that server, because the Windows client has already successfully set up an SMBv2 session, and it will always use SMBv2 for that server until it is rebooted.  Because the appliance can’t address protocol chattiness issues for SMBv2, it will disable latency optimization and only apply SDR data reduction.  To resolve this situation, you need to reboot the Windows client while the applicance is active, and the Riverbed device will force the client to use SMBv1 when the client re-establishes the CIFS session after reboot.

If optimization for SMB signing is configured, then the Riverbed will deliver optimized performance for the SMB signed SMBv1 traffic after forcing the negotiation down from SMBv2.


Update Center for Microsoft Forefront and Related Technologies

Friday, September 3rd, 2010

Microsoft has launched the Update Center for Microsoft Forefront and Related Technologies where you can now go and check for the latest updates related to any Forefront product. The site is located at and will provide you information such as product version, latest Service Pack, latest cumulative update and general guidance for all Forefront technologies.

System Center Support Team Blogs List

Friday, September 3rd, 2010

The App-V Team blog:
The WSUS Support Team blog:
The SCMDM Support Team blog:
The ConfigMgr Support Team blog:
The OpsMgr Support Team blog:
The SCVMM Team blog:
The MED-V Team blog:
The DPM Team blog:
The OOB Support Team blog:
The Opalis Team blog:

Data Protection Manager Storage Calculators

Thursday, September 2nd, 2010

Microsoft Data Protection Manager Team provided storage calculators for