Here is another XP SP3 vulnerability alert. I just read the information from Donna’s Security Flash.
———————————————————————————————–
Microsoft’s Windows XP Service Pack 3 (SP3) ships with an out-of-date version of Adobe’s Flash Player that’s vulnerable to recently-spotted attacks, according to Microsoft’s support documentation.
Windows XP SP3 includes Flash Player 9.0.115.0, a version released by Adobe Systems> in December 2007. That version of Flash Player, however, was superseded by version 9.0.124.0 on April 8, nearly two weeks before Microsoft decided SP3 was done by giving it a Release To Manufacturing (RTM) label and sending it out for distribution.
The older version that shipped with XP SP3, however, harbors a bug that hackers have been exploiting since last week; that’s when security researchers, including those at Symantec, reported what they at first thought was a zero-day vulnerability in the most current edition of Flash, 9.0.124.0. A few days later, however, Symantec retracted that claim, and said that only the older 9.0.115.0 was at risk.
Adobe has confirmed that version 9.0.115.0, included with XP SP3, is vulnerable to the ongoing attacks, which have originated from Chinese servers. Users have been attacked after visiting legitimate Web sites that had been hacked using now-common SQL-injection attacks.
http://www.computerworld.com.au/index.php/id;1307917085;fp;4;fpid;16
———————————————————————————————–
cheers
romanus
In the windows domain, the normal domain user will not have much permissions in his computer. But in the real time few domain users will need administration rights in the local computer like to install software, configure TCP/IP settings to setup internet, etc. But they don’t need domain administration rights. One solution is, those users can be added in the local administrator group so that they can perform all admin operations.
Desktop Central provides a computer configuration called “Group Management”, using this IT Administrator can add a domain user to the local administrator group!
Also it provides the following features:
- Ability to create a new local group
- Ability to delete a existing local group
- Ability to modify the existing local group members
Thanks
Mathi
[ <b>Mood:</b> Cool ]<br />[ <b>Currently:</b> Working ]<br />Most of the Enterprises use Microsoft Active Directory based windows network. Active Directory also provides lot of be benefits , few came in my mind are:
1. Achieve the desired organizational structure using Forest, Domains, Sub domains, Organizational Unit (OU)
2. Centralized management of users
3. Roaming User Profiles
4. Creating Standardized Configurations, Settings, and Options using Group Policy Object (GPO)
5. Enhancing Security
But the question is, does all enterprises use Active Directory ? What is the deployment ratio of Work group and other Directory Services in Enterprises ? Please share your views
Thanks
Mathi
You could have seen the Desktop Central Forums about the latest Templates support. Here is the link incase if you have missed it, which speaks about the release, purpose, how to use and other details.
The first phase of template has come out under various tags like Hard Disk Maintenance, Security, User Management, USB Security, Power Management, XP Firewal Management etc., As discussed in the forums, not only the available configurations also new registry based configurations will be introduced through Templates.
For the next update of Templates the planned new configurations would feature from boot and shutdown time Performance related details.
Please let me know your favourite or the most useful configuration that desktop admins would love to have as a Template.
Cheers. Happy Desktop Management.
~romanus~
Let me start this year with tips that make desktop administrator’s life easier. Here are the 5 important factors which can make the desktop management problem free
| Quote: |
| 1: Preventive Hard disk maintenance of the desktop (simple chkdsk, cleanmgr and defrag)2: Proper Patch management (Full lifecycle with Scan, deploy and report)
3: Controlling USB storage devices (to stop threats from those storage devices (AV, spyware etc at perimeter level)) 4: Handy Remote Desktop Sharing (for one to one trouble shooting) 5: Confirmation for software installations and deployed configurations (can solve many issues in real time scenario) |
These are the top five areas which can make the difference in desktop management in my perception. Some of the feature may not be in existence but still if it is made available that can really make desktop management hassle free. Let me know your stand?…
- romanus
Since the Desktop Central is a web based software, got many requests regarding multiple user login support. It will enable multiple desktop administrators to use the desktop central simultaneously , it is one of the biggest advantages of the web UI. The user login can be a administrator or technician, based on the role certain functionalities can be enabled or disabled. Desktop Central has lot of features Configurations, Patch Management, Service Pack Installation, Software Installation, Desktop Sharing, Active Directory Reports, etc. hence it is very important to restrict certain access to the technician. And the most important thing is audit, yes there should be a way to audit the activities done by each administrator or technician. Otherwise the changes went inside the desktops can’t be tracked. Certainly this feature will be a good value addition to the administrator !
This feature will be available before this month end !
Thanks
Mathi
Most of you might have heard about the upcoming releases of Microsoft products. Here is an update from my side
| Quote: |
| - Release of Windows Vista. i.e. Consumer availability of Vista will be in January 2007.- Microsoft Office System 2007 and- Release of Exchange 2007. The interesting thing is MS skipped the unlucky number 13 of the release to 2007. The release event details are given in the ms events site. |
Now its time to tell whats cooking in Desktop Central.
Desktop Central will have the powerful Software-Hardware Inventory integrated with it by mid of January 07. This will have lot of reports on Hardware and software. Also MEDC will be adding more reports on Patch management.


