Microsoft 在 Windowsbeta 网站发布了 Microsoft Windows Server 2003 SP1 和 Windows XP x64 Edition 的最新技术测试版本， 内部版本1247.IDS，已经在Windowsbeta提供下载。

IE中新增Information Bar, Addon Manager等一系列XPSP2中的安全功能。

新增Wireless Network Setup Wizard。

WMP升级到10.00.00.3647。

SCW更新：

*Security Configuration Wizard Update*

Security Configuration Wizard (SCW) is an attack surface reduction tool being introduced  with Windows Server 2003 SP1.  This SP1 refresh contains an updated version of SCW that has  many new features and capabilities that were not available in the original SP1 beta.   Specifically,

• ... A completely new firewall configuration component.
  • SCW is the recommended way of configuring the Windows Firewall on Windows Server  Systems.
  • Automatic port detection for non-default configurations, multiple instance scenarios, and 3rd Party Applications
• ... Additional Server Role definitions.
  • SCW now contains definitions for over 60 different server roles.  Including roles  for applications like Exchange, SQL Server, etc.
• ... Compliance analysis support.
  • Allows you to determine whether servers are in compliance with expected policies.
• ... Complete command line tool support.
  • Supports deploying and analyzing security policies remotely en-masse.
• ... New support for:
  • IIS-specific settings
  • Audit policy settings
  • Additional registry values
  • Group Policy-based deployment of SCW-generated security policies
  • Inclusion of security INF templates.
  • Centralized knowledge base repository
  • Clustered environments
  • Multi-level rollback

To install SCW:

• Install SP1
  • Install SCW from AddRemove Windows Components

To run SCW:

• Start/Run/SCW or launch from Administrative Tools

To use the SCW command line tool:

• scwcmd.exe

To test SCW:

• Launch the wizard.
• Select a server to lock down.
• Answer the wizards questions as appropriate.
• Apply the resulting security policy.
• Verify that the server continues to function as expected with the reduced attack  surface.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 Whats Left For Windows Server 2003 R2? Time: 10-19-2004

This is a sad day for Windows Server admins, like few months ago when I reported that "BearPaw" codename for the Next Generation Terminal Services would not be inlcuded in the R2 release of Windows 2003.

Today MS announced that 2 more killer feautures are removed: Network Access Protection and "Access Anywhere" the RDP and filesharing over https (rpcproxy) killer feature.

So whats left for R2? Not sure the VPN quarantine security feature will be released earlier in win2k3 SP1. Well to me it seems R2 will be nothing more then win2k3 with SP1.

Im sure there are reasons, but comon, this cool feature teasing sucks, cant they just hire 50 extra developers and get it done in time? Now we have to wait till 2007! while it is very clear these features are needed NOW. Just like SUS 2.0 (wus) we need it now, not end of 2005.

So much for being Windows Server MVP, I havent seen any discussion on this where I could get my voice heard.

Mary Jo Foley also reported it on microsoft-watch:

Executives with the Redmond software vendor vow they will deliver the R2 Windows Server release in 2005. But to do so, they are pushing back some features.

Microsoft wants to deliver its Windows Server 2003 update, known as "R2," in 2005. To make sure it will be able do so, the company is prioritizing its feature list and moving some R2 features into later releases.

Microsoft officials updated the companys Windows Server roadmap and made the changes public on Monday, in the name of maintaining "transparency" on behalf of customers.

In May, Microsoft officials said to expect R2 to include bug fixes for Windows Server 2003, as well as some of the 12 to 15 Windows Server "feature packs" that the company has rolled out since Windows Server 2003 shipped in April 2003. These feature packs include Active Directory Application Mode, SharePoint Services, Windows Update Services. Officials also said at that time that R2 would include full Network Access Protection and "Anywhere Access" capabilities, the latter of which was expected to draw on Microsofts next-generation Terminal Server features.

But now Microsoft has decided to push the Network Access Protection security capabilities it into Windows Server "Longhorn," the Windows Server release due in 2007.

"Delivering Network Access Protection in R2 would have forced too many changes at a low level," said Samm DiStasio, a group product manager with Microsofts Windows Server division, in explaining the companys decision to postpone the feature until Longhorn Server.

At the same time, the Redmond software vendor has decided to cut any new Terminal Server updates from R2 and push them into the 2007 timeframe, executives confirmed. There was talk earlier this year that Microsoft had opted to axe Terminal Server "Bear Paw" features from R2, but the company would not confirm this decision publicly until now.

DiStasio denied rumors that Windows Server R2 was slipping into 2006. He said that Microsoft is still on target to deliver R2 in 2005, and said the second half of next year is the latest ship target. The company has yet to ship an R2 beta release to testers, DiStasio acknowledged, but said that one should be ready to go "relatively quickly."

Not every expected R2 feature is slipping, however. In fact, the VPN network-quarantine security feature that Microsoft had told its testers to expect to debut in R2 is going to be delivered earlier, as part of Windows Server 2003 Service Pack 1, which is going to be delivered in the first half of 2005, Microsoft executives said.

There are rudimentary network-quarantine capabilities already built into Windows Server 2003. But Rs network quarantine, say our sources, will go a step further by checking the "health" of all client machines" by running antivirus and other "scriptable checks" on systems before they are allowed to connect to a corporate network via a virtual-private network or DHCP. If a client is "quarantined," it will receive access to patches and other inoculations/services to return it to an acceptable state of health.

In May, Microsoft officials said the company is planning to release a new version of Windows Server every two years. The company will deliver a major Windows Server (like Windows Server 2003 and Windows Server Longhorn) release every four years, and ship a more minor interim update in between each major update. R2 is considered an interim update.

On Monday, Microsoft reiterated other planned ship dates on its Windows Server roadmap.

Microsoft will deliver in the first half of 2005 Windows Server 2003 Service Pack 1 (a near-final "release candidate" beat of which is due this fall); 64-bit Windows Server 2003 releases for Intel and AMD systems; the final release of its Windows Update Services patch-delivery service; and a software development kit for its forthcoming Windows Server 2003 High Performance Computing Edition.

According to company officials, Microsoft is on target to release in the second half of 2005 the full Windows Server 2003 High Performance Computing Edition; an R2 version of Windows Storage Server; and a first beta of its Longhorn Server, the final of which is still due out in 2007.

Microsoft also announced Monday that it is working to make its Network Access Protection security architecture compatible and interoperable with Cisco Systems Network Admissions Control security architecture by 2007. Cisco recently minted a similar interoperability deal with IBM involving its Network Admissions Control and IBMs Tivoli architectures.

注：此信息转载自 www.ssite.org