Wednesday, August 26, 2009

WindowsNetworking.com - August 2009 Newsletter

-----------------------------------------
WindowsNetworking.com Monthly Newsletter of August 2009
Sponsored by: GFI
-----------------------------------------

Welcome to the WindowsNetworking.com newsletter by Thomas W Shinder
<http://www.windowsnetworking.com/Thomas_Shinder/> MD, MVP. Each month we will
bring you interesting and helpful information on the world of Windows
Networking. We want to know what all *you* are interested in hearing about.
Please send your suggestions for future newsletter content to:
tshinder@windowsnetworking.com


1. XP Mode - It's Not a Mode!
---------------------------------------------------------

You have probably heard about the new feature included in Windows 7 called XP Mode. What XP Mode is designed to do is allow you to run legacy applications on a virtual instance of Windows XP. To get this to work, you first install Windows Virtual PC on a Windows 7 computer. You can download the Windows Virtual PC application from the Microsoft Web site - you need to download the application because it&#146;s not included with the Win7 operating system.

After you download and install Windows Virtual PC, you next download a licensed copy of Windows XP. No, you do not download installation files or an .iso, you actually download a licensed copy of a Windows XP virtual machine. The Windows XP virtual machine you download will have a special installer, so getting the XP virtual machine running is a bit more straightforward than putting together your own virtual machine solution from scratch.

Once Windows XP is installed in a virtual machine on your Win7 host computer, you can then start installing applications that won&#146;t run on Windows 7 in the Windows XP virtual machine. Where the oohs and ahhhs come in is when you click the Start button on the Windows 7 host computer and see the applications running on the Windows XP guest machine appear there. When you click the Start menu item for the application, the application appears on the host system's desktop just as if the user had launched it from a host system installation. They call this "seamless integration". Not too shabby, eh?

But the question comes now, where is the "mode" in all of this? What part makes XP mode a "mode"?

Why even ask this question?

You need to ask this question because Windows XP is not the only guest operating system you can install on a Windows 7 host running Windows Virtual PC. You can install 32-bit versions of Windows XP, Windows Vista or Windows 7 on the host Windows 7 computer using Windows Virtual PC on the host. You also get the same seamless application integration with the host computer when you create your own XP, Vista or Win7 virtual machines. So, clearly application integration is not the "mode"

Is it the installer file that you use to install the "XP Mode" Windows XP that makes it a "mode"?

Is it the application integration that you use to make virtual applications appear on the host desktop? If so, is there a Vista Mode and a Windows 7 Mode?

Is it the free license you get to run Window XP that makes it "mode"?

The problem is that there is no &#147;mode&#148; in the XP Mode. It is a marketing term and nothing more. Do not try to infer any technical meaning into the name, otherwise you will drive yourself crazy. XP Mode is just a marketing term for running a pre-built Windows XP virtual machine on Windows 7 using Windows Virtual PC as the virtualization engine. The free Windows XP license is only available when you buy Windows 7 Professional, Windows 7 Enterprise and Windows 7 Ultimate.

One more thing about XP Mode; it is considered to be an unmanaged solution for small and midsized businesses. However, there is nothing to get in the way of you making it into a managed solution. There are two general approaches that allow you to do that:

* Change the default networking behavior from NAT to bridged in the XP virtual machine. The default is NAT because small and midsized businesses do not have to worry about IP address management or depletion. But if you want to manage the Windows Virtual PC virtual machines, you will want to change from NAT to bridged.

* Use Microsoft enterprise virtual machine management tools such as Microsoft Enterprise Desktop Virtualization (MED-V) and Microsoft Application Virtualization (APP-V). MED-V and APP-V can be used together to enable robust management of a virtual client infrastructure.

There you have it. XP Mode is cool. But remember, there is no "mode" &#150; do not look for the mode, do not search for the mode, do not ask about the mode and do not dream about the mode. There is no mode. A second take-home message is that virtual machines installed on Windows 7 using Windows Virtual PC can be managed just like any other machine on the network.

Thanks!

Tom
tshinder@windowsnetworking.com


For ISA or TMG firewall, as well as other Forefront Consulting Services in the USA, call me at 206-443-1117. Oh yes - we also do Microsoft virtualization technology consulting.
Or visit our Web site - Prowess Consulting (<http://www.prowessconsulting.com>)

Got a networking question that you can't find the answer to? Send a note to Dr. Tom at tshinder@windowsnetworking.com and he'll answer your question in next month's newsletter.

=======================
Quote of the Month - "Sometimes the appropriate response to reality is to go insane." - Philip K. Dick (1928 - 1982)
=======================


2. ISA Server 2006 Migration Guide - Order Today!
---------------------------------------------------------

Dr. Tom Shinder's best selling books on ISA Server 2000 and 2004 were the "ISA
Firewall Bibles" for thousands of ISA Firewall administrators. Dr. Tom and his
illustrious team of ISA Firewall experts now present to you , ISA Server 2006
Migration Guide
<http://www.amazon.com/exec/obidos/ASIN/1597491993/isaserver1-20/>. This book
leverages the over two years of experience Tom and his team of ISA Firewall
experts have had with ISA 2006, from beta to RTM and all the versions and builds
in between. They've logged literally 1000's of flight hours with ISA 2006 and
they have shared the Good, the Great, the Bad and the Ugly of ISA 2006 with
their no holds barred coverage of Microsoft's state of the art stateful packet
and application layer inspection firewall.

Order your copy of ISA Server 2006 Migration Guide
<http://www.amazon.com/exec/obidos/ASIN/1597491993/isaserver1-20/>. You'll be
glad you did.

3. WindowsNetworking.com Articles of Interest
---------------------------------------------------------

* Working with Read Only Domain Controllers (Part 3)
<http://www.windowsnetworking.com/articles_tutorials/Working-Read-Only-Domain-Controllers-Part3.html>

* Windows 2008 Share and Storage Management Tool
<http://www.windowsnetworking.com/articles_tutorials/Windows-2008-Share-Storage-Management-Tool.html>

* Deploying Windows 7 - Part 5: MDT 2010 Enhancements
<http://www.windowsnetworking.com/articles_tutorials/Deploying-Windows-7-Part5.html>

* Windows XP Mode for Windows 7 (Part 2)
<http://www.windowsnetworking.com/articles_tutorials/Windows-XP-Mode-Windows-7-Part2.html>

* Deploying Windows 7 - Part 6: Lite Touch using MDT 2010
<http://www.windowsnetworking.com/articles_tutorials/Deploying-Windows-7-Part6.html>

* Lansweeper: The Network Admin's Best Friend
<http://www.windowsnetworking.com/articles_tutorials/Lansweeper-Network-Admins-Best-Friend.html>

* Examining the New Windows 7 User Interface
<http://www.windowsnetworking.com/articles_tutorials/Examining-New-Windows-7-User-Interface.html>

* Group Policy Settings: How Settings are Stored (Part 1)
<http://www.windowsnetworking.com/articles_tutorials/Group-Policy-Settings-Part1.html>


4. Administrator KB Tips of the Month
---------------------------------------------------------

Given that we can not get KB article information based on the date the article was published anymore, I think it is time to say "good bye" to the KB article of the month section. It has been over a year since they removed the ability to limit the KB searches by date, and there is no indication that they intend to fix the situation.

The new section is going to be the "Administrator KB Tips of the Month". Over at www.windowsnetworking.com we keep a database of administrator tips. We have tips on Windows 2000, Windows Server 2008, Windows 2003, NT, XP, Vista and Windows 7 (in the future). The admin KB is a wealth of information that any admin will get something good out of.

This month, our admin KB tips of the month focus on DHCP. Check out these nuggets:

* Displaying DHCP scope activity using Netsh <http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2008/AdminTips/Network/DisplayingDHCPscopeactivityusingNetsh.html>

* Displaying DHCP server activity using Netsh <http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2008/AdminTips/Network/DisplayingDHCPserveractivityusingNetsh.html>

* Creating a DHCP Scope using a Batch File <http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2008/AdminTips/Network/CreatingaDHCPScopeusingaBatchFile.html>

* Backing up DHCP database using Netsh <http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2008/AdminTips/Network/BackingupDHCPdatabaseusingNetsh.html>

For more admin tips, check out the entire database! <http://www.windowsnetworking.com/kbase/WindowsTips>


5. Windows Networking Tip of the Month
---------------------------------------------------------

You might have heard about BitLocker. First introduced with Windows Vista, BitLocker enables you to encrypt drive partitions or volumes. The first incarnation of BitLocker allowed you to encrypt the system partition only. Subsequent versions in Vista allowed you to encrypt data volumes as well. While there has always been 3rd party support for whole volume encryption, it is nice to have it integrated into the operating system.

Windows 7 introduces BitLocker to Go. With BitLocker To Go, you can encrypt USB keys and other external devices. Very nice, but like with regular BitLocker, there have been 3rd party tools that allow you to do the same thing and they are often included with the USB key itself. However, like I said, it is nice to have integrated operating system support.

I was playing with the new BitLocker To Go feature yesterday and learned of a few limitations that you should know about. First, BitLocker to Go is available only with Windows 7 Enterprise and Ultimate - so if you have Home versions or Pro, forget about it. Also, full functionality is available only on Windows 7 machines.

What do I mean by full functionality? First, you need a Windows 7 machine to encrypt the USB key. During the process, you assign an unlock password. Now you can take the encrypted USB key to any other Windows 7 machine and read and write to the encrypted USB key after entering the password. Nice. You can also take the encrypted key to a Vista SP1 and above or Windows XP SP3 machine and read the data on the key. There is a BitLocker To Go executable on the key that you can see in the Explorer windows. Double click on that and you can enter the unlock password. This opens a window that allows you to view the files on the encrypted key and open the files that you view. However, you cannot write to the key, because encryption is only supported on Windows 7 machines.

Well, there ain't that many Windows 7 machines out there right now – so be careful with BitLocker To Go if you want to be able to read and write to your encrypted keys. You do not want to get stuck in the middle of nowhere with a Windows XP or Vista machine and need to write to the key because it is not going to work.


6. WindowsNetworking Links of the Month
---------------------------------------------------------

* Remote Server Administration Tools for Windows 7
<ttp://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d#tm>

* Download Windows Virtual PC RC and Windows XP Mode RC
<http://www.microsoft.com/windows/virtual-pc/download.aspx>

* Back Up Windows 7 by Creating a System Image
<http://www.elmajdal.net/Win7/Back_Up_Windows_7_by_Creating_a_System_Image.aspx

* Activating Windows 7 RTM Online
<http://www.elmajdal.net/Win7/Activating_Windows_7_RTM_Online.aspx>

* In-Place Upgrade From Windows 7 Beta / RC To Windows 7 RTM
<http://www.elmajdal.net/Win7/In-Place_Upgrade_From_Windows_7_Beta_RC_To_Windows_7_RTM.aspx>

* Release Documents for Windows 7
<http://www.microsoft.com/downloads/details.aspx?FamilyID=139ff495-0cd2-4e88-be98-1090867ab28f&displaylang=en>


7. Ask Dr. Tom
---------------------------------------------------------

* QUESTION:

I know there is a lot of cool stuff included with Windows 7, but I have not had a chance to look at it yet. I was talking to a buddy yesterday about routine tasks we do without Windows XP machines and the topic of defrag came up. I heard something about defrag being different with Windows 7 but was not sure what the difference was. Is there still a built in defragger with Windows 7? If so, anything new?

Thanks! - Jeremy.


* ANSWER:

Hi Jeremy,

You bet there's new stuff in the Windows 7 defragger. What you probably heard about was the fact that the defrag fragmentation map is no longer included in the Windows 7 defragger. You will get some progress information, but no cool map like with other defrag products, or even the cruddy map you got with previous versions of the Windows defragger.

However, Microsoft does try to make it up to you by building in a scheduler right into the defrag applications. But default Windows 7 will defrag you disks once a week. However, you can customize the schedule to your heart's content. That is about it. As for any architectural changes in the Windows 7 defragger, check out this blog post Disk Defragmentation - Backround and Engineering the Windows 7 Improvements <http://blogs.msdn.com/e7/archive/2009/01/25/disk-defragmentation-background-and-engineering-the-windows-7-improvements.aspx>.


Got a question for Dr. Tom? Send it to tshinder@windowsnetworking.com


TechGenix Sites
---------------------------------------------------------

MSExchange.org <http://www.msexchange.org/>
WindowSecurity.com <http://www.windowsecurity.com/>
ISAserver.org <http://www.isaserver.org/>
VirtualizationAdmin.com <http://www.virtualizationadmin.com/>

--
Visit the Subscription Management <http://www.techgenix.com/newsletter/>
section to unsubscribe.
WindowsNetworking.com is in no way affiliated with Microsoft Corp.
http://www.techgenix.com/advert/index.htm for sponsorship
information or contact us at advertising@windowsnetworking.com
Copyright c WindowsNetworking.com 2009. All rights reserved.

No comments:

Post a Comment