• Vista Codec Package 4.4.9 Final
  The latest update to this code package includes an updated AC3Filter and ffdshow, and has some bug fixes as well.
  (tags: Codec Software )
• Featured Windows Vista Download: Get Virtual Desktops on Vista
  Get multiple desktops that allow key combo's to jump between them.
  (tags: Desktop Software Beta )
• Windows Vista Tip: The Fastest Way to Launch Programs with Elevated Credentials
  A keyboard only way to launch a program with Elevated Credentials.
  (tags: UAC Keyboard )
• Bamboo for Vista
  A nice looking pen tablet that works with Vista.
  (tags: Hardware Pen Tablet )
• BeyondTrust Controls UAC Pop-ups
  A group policy extension that allows customization of UAC, providing permissions to applications, users, and computers.
  (tags: UAC GPO Utility )
• AveNoBreadCrumb to Disable Your Breadcrumb
  A hack to disable breadcrumbs (the one folder at a time listing you get in the explorer in Vista).
  (tags: Hack Breadcrumbs )
• Account Reset Console 4.5 Tool
  Interfaces with the Vista Credential Provider to allow users to change

…

I joined a session “Deep Dive into Microsoft Windows Vista Group Policy Changes and Troubleshooting” with Jeremy Moskowitz here in Orlando - and he was very good. He’s a funny guy and it seemed like everybody in the room just loved him. Thanx for the inspiration Jeremy - you put on a nice show.

After the session I joined him at the SpecOps booth (#914) and spoke to some of the other Group Policy Gurus, like Darren Mar-Elia, J. Peter Bruzzese and the SpecOps employees. SpecOps were really focused on sharing info on their SpecOps Deploy product - so why not help them here ;-)

Tomorrow I hope to catch Derek Melber - a ‘colleague’ from www.windowsecurity.com - he was busy preparing for his upcoming Group Policy sessions so he didn’t show today… I’ll try to get back with a report from those sessions when possible.

I have to mention that it turned out Peter Bruzzese not only mentions me, but also quotes me, in his new book “Tricks of the Microsoft Windows Vista Master” * - as a “Vista Master” - thanx for the honor!

* Book…

Hey,

I get this question a lot: how can we block U3 devices on the network?

Well, one approach that some companies take is to simply block the physical USB ports by glue etc. - no USB devices are able to get in, so we have a “secure” system… Hmmm, this would mean that we are not able to use other USB devices either - maybe not the best solution for all of us then…

If you have Windows Vista deployed the new Device Control functionality, but most companies have Windows XP and Windows Server 2003 products in production (and probably waits for Vista Service Pack 1 before they go ahead with the Vista deployment)… So, what could they do then?

Third party software, like GFI EndPointSecurity is capable of blocking USB devices etc. - and it’s does a very good job too, but there’s also a free way to do it (if you ask me it’s the best way to do it): implement Software Restriction Policies (SRP)!

I’ve been writing about the “Default Deny All Applications” approach and this is (of couse) also capable of blocking U3 devices - out…