Microsoft

1
Microsoft Windows Server 2003 Service Pack 1
Microsoft Windows XP Service Pack 2
Molnár AttilaTerméktámogatási Tanácsadó
2
Bevezetés

• Egy szerviz csomag életciklusa
• Új kihívások, új megközelítés, új SP
• Egy sokkal biztonságosabb rendszer
• Üzemeltethetobb
• Új fejlesztések

3
Áttekintés

• Hálózatvédelem
• Memóriavédelem
• Internet
• Üzemeltetés
• Bevezetés
• Windows 2003 SP1 jellemzok, összehasonlítás

4
Hálózatvédelem

• Windows Firewall
• Remote Procedure Call (RPC)
• Distributed Component Object Model (DCOM)
• Alerter és Messenger szolgáltatások

5
Állapot nyilvántartó tuzfal

• Az átmeno forgalom több szempontból történo
  elemzése
• Alapfolyamat
• Minden csomag esetében ellenorzi a feladó,
  címzett címét.
• Kimeno forgalomról táblázatot tart nyilván.
• Az érkezo csomagokat az elobbi táblázat
  segítségével kiértékeli.
• A nem megfelelo csomagok eldobásra kerülnek.
• ICF és a Windows Firewall állapot nyilvántartó
  tuzfalak

6
Hibaelhárítás

• Megoldás
• Program engedélyezése
• Portok engedélyezése
• Naplózás engedélyezése
• Windows Firewall Logging
• Trace Logging
• Tuzfal kikapcsolása, ha semmi sem segített
• Konfigurációs adatok gyujtése

7
Hibaelhárítás II.

• Kapcsolat ellenorzése
• Konfiguráció ellenorzése
• NetSH futtatása
• Szervizek ellenorzése
• SharedAccess
• Eszközkezelo ellenorzése
• IPNAT
• Alapértelmezett beállítások visszaállítása
• Policy beállítások ellenorzése
• Szervizek közötti függoségek ellenorzése

8
Hálózatvédelem
9
Memóriavédelem

• Data Execution Prevention
• Data Execution Prevention jelentosége
• Kompatibilitás problémák
• Access Violation és Buffer Overrun
• Konfiguráció és hibaelhárítás
• Rendszerbeállítások (Dump)
• Boot.ini

10
Internet Újdonságok

• Pop-up Blocker
• Internet Explorer Add-On Manager
• Internet Explorer Crash Detection
• Internet Explorer Binary Behaviors Security
  Setting
• Internet Explorer BindToObject Mitigation
• Java VM Security Setting
• Local Machine Zone Lockdown
• MIME Handling Enforcement
• Object Caching
• Untrusted Publishers Mitigations
• Window Restrictions
• Zone Elevation Blocks

11
Üzemeltetés

• Windows Update v5
• Windows Installer 3.0
• Service Security
• Group Policy

12
Bevezetés

• Microsoft Application Compatibility Toolkit 4.0
• Tesztrendszerek kiépítése, alkalmazásteszt
• Felhasználók, üzemeltetok HelpDesk oktatása
• Az éles környezet felkészítése, Group Policy stb.
• Teszt bevezetés

13
Bevezetés

• Telepítés
• Windows Update (nem blokkolható)
• SMS-el
• Update.exe kapcsolóival
• MSI csomaggal (Update.msiGroup Policy)
• SlipStreamelt telepítokészlet
• Minden új funkció letiltható
• maga az SP2 eltávolítható
• Recovery Console (batch spuninst.txt)
• Eredeti telepíto Repair Windows opciójával
• 2GB szabad hely
• telepíto fájlok 350 MB
• Telepített fájlok?350 MB
• Uninstall 400 MB (NTFS-en tömörítve)
• Restore Point 500 MB

14
Ismert jelenségek

• The IIS and SMTP services do not start when you
  deploy a Windows XP SP2 Sysprep image on your
  Windows XP SP2-based computer http//support.micro
  soft.com/default.aspx?scidkben-us889073
• Remote Assistance cannot connect to a Windows XP
  SP2 client computer in SMS Administrator console
  in Systems Management Server 2003
  http//support.microsoft.com/default.aspx?scidkb
  en-us886120
• Halo Combat Evolved Compatibility fix for
  Windows XP SP2 and 256 MB video cards
  http//support.microsoft.com/default.aspx?scidkb
  en-us886301
• The Bluetooth File Transfer Wizard is missing
  from the Communications menu in Windows XP SP2
  http//support.microsoft.com/default.aspx?scidkb
  en-us891595
• A message appears in the Information Bar when you
  open a Web page that must download an ActiveX
  control after you install Windows XP SP2
  http//support.microsoft.com/default.aspx?scidkb
  en-us884674
• The Natural Keyboard Elite does not respond after
  you resume from standby in Windows XP SP2
  http//support.microsoft.com/default.aspx?scidkb
  en-us892198
• Some Group Policy settings may be displayed in
  Extra Registry Settings in the Group Policy
  Management console in Windows XP SP2
  http//support.microsoft.com/default.aspx?scidkb
  en-us890955
• ARCserveIT 6.61 does not successfully back up
  files that are in the Windir\SoftwareDistributio
  n folder of your Windows XP SP2-based computer
  http//support.microsoft.com/default.aspx?scidkb
  en-us870904
• Patch for the Microsoft eLearning Library (MELL)
  Viewer for Windows XP SP2 Release
  http//support.microsoft.com/default.aspx?scidkb
  en-us886356
• Your Windows XP SP2-based computer may become
  slow and unresponsive when you use the ADSI IADs
  interface that is retrieved from the
  IEnumVariantNext method http//support.microsoft
  .com/default.aspx?scidkben-us893317
• You receive several blank error messages when you
  try to run a storage report from a Windows XP SP2
  client http//support.microsoft.com/default.aspx?
  scidkben-us889002
• You receive an "Error occurred while Windows was
  working with the Control Panel file" error
  message when you open Control Panel in Windows XP
  SP2 http//support.microsoft.com/default.aspx?scid
  kben-us892890
• BUG You may receive an error message when you
  try to initialize full-text indexing for a
  database on a computer that is running Windows XP
  SP2 http//support.microsoft.com/default.aspx?sci
  dkben-us883783

15
Ismert jelenségek

• You cannot use the Preview feature and the Find
  feature in Class Server 3.0 after you install
  Windows XP SP2 http//support.microsoft.com/defaul
  t.aspx?scidkben-us883049
• You experience problems when you disconnect a
  single IEEE 1394 device from a computer that is
  running Windows XP SP2 http//support.microsoft.co
  m/default.aspx?scidkben-us887170
• AutoShapes that were added to an HTML or an MHTML
  file in a Microsoft Office program do not appear
  when you open the file in Internet Explorer after
  you install Windows XP SP2 http//support.microsof
  t.com/default.aspx?scidkben-us883969
• Description of the known issues with using
  Outlook Web Access on a Windows XP SP2-based
  computer http//support.microsoft.com/default.asp
  x?scidkben-us883575
• Windows XP SP2-based VPN or dial-up client cannot
  access remote resources http//support.microsoft.
  com/default.aspx?scidkben-us896072
• FIX "This action is only valid for products
  currently installed" error message after you
  install two major software updates for a product
  on Windows XP SP2 by using Windows Installer 3.0
  http//support.microsoft.com/default.aspx?scidkb
  en-us893048
• Error message indicates that a file on the
  Windows XP Professional CD-ROM is required to
  continue the upgrade to Windows XP Professional
  SP2 http//support.microsoft.com/default.aspx?scid
  kben-us894726
• FIX "Run-time error 1008" when you run an
  application that was created by using Visual
  Studio 6.0 on Windows XP SP2 http//support.micro
  soft.com/default.aspx?scidkben-us833671
• Memory size information does not appear correctly
  in System Properties in Microsoft Windows XP
  Service Pack 2 http//support.microsoft.com/defaul
  t.aspx?scidkbLN888664

16
Hasznos Linkek

• Microsoft XP SP2 How To? http//www.microsoft.com/
  windowsxp/sp2/howto/default.mspx
• Steps to take before installing Windows XP SP2
  http//www.microsoft.com/smallbusiness/issues/tech
  nology/security/steps_to_take_before_installing_wi
  ndows_xp_sp2.mspx
• Microsoft Application Compatibility Toolkit 4.0
  http//www.microsoft.com/downloads/details.aspx?Fa
  milyIDd7d08414-0136-492f-9ad9-ce8aeb7500c7Displa
  yLang090909090909en
• Windows XP Service Pack 2 Deployment Tools
  http//www.microsoft.com/downloads/details.aspx?Fa
  milyID3e90dc91-ac56-4665-949b-beda3080e0f6displa
  ylangen
• Deploying Windows XP Service Pack 2 with Systems
  Management Server http//www.microsoft.com/technet
  /prodtechnol/sms/sms2003/deploy/deployingwinxpsp2_
  3.mspx
• How to troubleshoot WMI-related issues in Windows
  XP SP2 http//support.microsoft.com/default.aspx?s
  cidkben-us875605
• How to Configure Windows XP SP2 Network
  Protection Technologies in a Small Business
  Environment http//www.microsoft.com/technet/secur
  ity/smallbusiness/prodtech/windowsxp/netprtct.mspx
  
• Windows XP Service Pack 2 Support Tools
  http//www.microsoft.com/downloads/details.aspx?am
  pdisplaylangenfamilyid49ae8576-9bb9-4126-9761-
  ba8011fabf38displaylangen
• After you install Windows XP Service Pack 2 or
  Windows XP Tablet PC Edition 2005, your computer
  restarts continuously http//support.microsoft.com
  /default.aspx?scidkben-us873161

17
Windows 2003 SP1

• Hasonló funkcionalitás
• Tuzfal, DCOM, RPC, IE
• Eltérések a Windows XP SP2-höz képest
• Post Setup Security Update
• Security Configuration Wizard
• Eltérések Windows 2003 telepítésenként
• Upgrade
• Slip-stream

18
Ismert jelenségek

• MS05-019
• You receive an "UnauthorizedAccessException"
  error message when the MOM-to-MOM Product
  Connector tries to forward alert and discovery
  information in Microsoft Operations Manager 2005
  http//support.microsoft.com/default.aspx?scidkb
  en-us895951
• You receive a "You do not have the appropriate
  privilege" error message when you try to open the
  Microsoft Operations Manager (MOM) 2005
  Administrator Console http//support.microsoft.com
  /default.aspx?scidkben-us895952
• Known issues that may occur if you install
  Windows Server 2003 SP1 on Windows Small Business
  Server 2003 http//support.microsoft.com/default.a
  spx?scidkben-us897342
• The Windows Firewall service in Windows XP
  Service Pack 2, in Windows XP Professional x64
  Edition, in Windows Server 2003 SP1, and in
  x64-based versions of Windows Server 2003 cannot
  start if the DCOM Process Launcher Service is
  disabled http//support.microsoft.com/default.aspx
  ?scidkben-us892504
• Windows Server 2003 SP1 Outlook Web Access
  hotfix is required http//www.microsoft.com/techne
  t/prodtechnol/exchange/EXBPA/b3662fce-0c7c-4b6f-8d
  eb-5b78734bcd24.mspx

19
Hasznos linkek

• Changes to Functionality in Microsoft Windows
  Server 2003 Service Pack 1 http//www.microsoft.co
  m/downloads/details.aspx?FamilyIdC3C26254-8CE3-46
  E2-B1B6-3659B92B2CDEdisplaylangen
• Windows Server 2003 Service Pack 1 application
  compatibility http//support.microsoft.com/default
  .aspx?scidkben-us896367
• Security Configuration Wizard Documentation
  http//www.microsoft.com/downloads/details.aspx?Fa
  milyID903fd496-9eb9-4a45-aa00-3f2f20fd6171displa
  ylangen
• TechNet Webcast Windows Server 2003 Service Pack
  1 Security Configuration and Role-Based Server
  Deployment (Level 300) http//msevents.microsoft.c
  om/cui/WebCastEventDetails.aspx?cultureen-USEven
  tID1032268013EventCategory5
• Deploying Wireless Provisioning Services (WPS)
  Technology Abstract http//www.microsoft.com/techn
  et/prodtechnol/windowsserver2003/library/ServerWhi
  tepapers/b3c08713-1332-45e3-8416-e2be58e7127a.mspx
  
• Microsoft Windows Server 2003 Service Pack 1
  Installing and Deploying Updates
  http//www.microsoft.com/technet/prodtechnol/windo
  wsserver2003/library/WebW2K3SP1hfdeploy/0e02a953-a
  ca7-4dad-b3e2-c94ea72bbc3d.mspx
• Updated System Preparation tool for Windows
  Server 2003 Service Pack 1 http//support.microsof
  t.com/kb/892778

20
(No Transcript)
21
(No Transcript)