Typically hotfixes are released on the second Tuesday of each month as you are all well aware.  Occasionally, I can personally only remember three including this one, there are out of band hotfixes released.  While we don’t normally post hotfix release notifications considering this is an out of band release I wanted to let you all know about it.通常情況下發布的修補程序的第二個星期二每個月你都清楚地意識到。有時候，我個人可以只記得三項，包括這一次，有帶外的修補程序發布。雖然我們通常不釋放後的修補程序審議這一通知是一個徹頭徹尾的帶釋放我希望向您都知道它。

Microsoft Security Bulletin MS08-067 – Critical Microsoft安全公告MS08 - 067 -臨界

Vulnerability in Server Service Could Allow Remote Code Execution (958644)伺服器服務的弱點可能允許遠程代碼執行（ 958644 ）

http://www.microsoft.com/technet/security/Bulletin/MS08-067.mspx

Executive Summary 內容提要

This security update resolves a privately reported vulnerability in the Server service.此安全更新解決了秘密報告的漏洞在服務器服務。 The vulnerability could allow remote code execution if an affected system received a specially crafted RPC request.這個安全漏洞可能允許遠程執行代碼，如果受影響的系統收到了特製的RPC請求。 On Microsoft Windows 2000, Windows XP, and Windows Server 2003 systems, an attacker could exploit this vulnerability without authentication to run arbitrary code.在Microsoft Windows 2000 ， Windows XP和Windows Server 2003系統，攻擊者可以利用此漏洞無需通過認證的運行任意代碼。 It is possible that this vulnerability could be used in the crafting of a wormable exploit.有可能是這個漏洞可用於製作一種蠕蟲利用。 Firewall best practices and standard default firewall configurations can help protect network resources from attacks that originate outside the enterprise perimeter.防火牆最佳做法和標準的默認防火牆配置可以幫助保護網絡資源免受攻擊源自企業以外的周邊。

This security update is rated Critical for all supported editions of Microsoft Windows 2000, Windows XP, Windows Server 2003, and rated Important for all supported editions of Windows Vista and Windows Server 2008.此安全更新的額定臨界所有支持版本的Microsoft Windows 2000 ， Windows XP中， Windows Server 2003和額定重要的是，所有支持版本的Windows Vista和Windows Server 2008 。 For more information,欲了解更多信息，

We’ve covered a creating a cluster and clustering a service and one other thing to configure in your cluster is failback policies.  These control if, how and when a failed resource is brought back online on the preferred owner.  As an example, say Node 1 in your file server cluster goes offline.  The resource will failover to Node 2.  But what happens when Node 1 comes back online?  By default, nothing, and this is to prevent a resource from bouncing back and forth between nodes as Node 1 goes on and offline due to a hardware issue, software updates, etc…我們已經涵蓋了創建一個集群和集群服務和其他東西來配置您的群集故障的政策。如果這些控制，如何和何時失敗的資源帶回線上的首選所有者。作為一個例子，說節點1在您的文件服務器群集不用離線。資源將故障轉移到節點2 。但是，當節點1回來在線？默認情況下，沒有什麼，這是為了防止資源的彈跳之間來回節點節點1不用關於和離線由於硬件問題，軟件更新等...

Again by default you will have to failback the resource manually as shown in the previous post on clustering a service.  If you wish to create an automated failback policy we have to do two things.  We can start by right-click on the service or application and select Properties.默認情況下，再次你將不得不故障手動的資源顯示在以前的職位集群服務。如果您希望創建一個自動故障的政策，我們必須做兩件事。我們可以從右鍵點擊服務或應用程序並選擇屬性。

First we must set a preferred owner for the service or application.首先，我們必須建立一個首選所有者的服務或應用程序。

Next we can set the failback.  As you can see below the Prevent Failback radio button is selected by default.  You can change this to Allow Failback and then choose immediately or set下一步，我們可以設置故障。正如你可以看到以下的防止故障恢復單選按鈕是默認選中的。您可以更改，這讓故障恢復，然後選擇立即或設置

We’ve covered我們已經涵蓋 setting  up a two node failover cluster in Windows Server 2008建立兩個節點故障轉移群集在Windows Server 2008年 and now that we have that running we can start to cluster some services and/or applications.  In this example we’ll cluster File Services to create a highly available file share.  To start we can simply right-click Services and Application under the cluster and choose Configure a Service or Application.現在，我們已經運行，我們可以開始集群的一些服務和/或應用。在這個例子中我們會群集文件服務，以創造一個高度可用的文件共享。要開始，我們可以簡單地右鍵單擊服務和應用的集群並選擇配置服務或應用程序。

From there we are presented with a list of services and applications that can be clustered.從這裡我們提出一個清單，服務和應用，可群集。

Simply choose the service or application you want to make highly available…只要選擇服務或應用程序您要高度可用...

A quick system check will ensure you have the required components in place.  The proper install order would be:快速系統檢查將確保您有必要組成部分到位。正確的安裝順序是：

• Clustering Role聚類作用
• Role, Service or Application to be clustered作用，服務或應用集中

We will choose the File Server role as it is already installed.我們將選擇文件服務器作用，因為它已安裝。

You will have to provide a name (used by NetBIOS and DNS) as well as the public IP address you wish to use.  This will be the IP that users connect to gain access to resources.你必須提供一個名稱（所使用的NetBIOS和DNS ） ，以及公共的IP地址要使用。這將是用戶的IP連接獲取資源。

Next下一個

If you have ever set up a Windows cluster in Windows 2003, 2000 or if you were brave enough NT4 you know it has always posed a number of challenges that usually required some specialized skills.  Well in Windows Server 2008 that has changed thankfully and we can whip together a two node failover cluster in minutes!  Before you get started you will need the following:如果您曾經設立了一個Windows群集在Windows 2003年， 2000年，或者如果您有足夠的勇氣NT4你知道它總是提出了一些挑戰，通常需要一些專門的技能。那麼在Windows Server 2008年的變化，改變了令人欣慰的，我們可以鞭子一起兩節點故障轉移群集分鐘！在您開始之前，您需要以下內容：

1. 3 servers at minimum (1DC, 2 Nodes)第3服務器上最低（ 1DC ， 2個節點）
2. Shared storage (iSCSI or FibreChannel)共享存儲（ iSCSI或光纖通道）
3. 3 Networks (Public, iSCSI, Heartbeat)三網（公眾， iSCSI的，心跳）

With that in place the first thing to do is get the cluster role installed on both nodes.  On Sever Core you can do that with the following command (case sensitive):在這方面發生的第一件事做的就是集群的作用上安裝兩個節點。論的核心服務器，您可以做到這一點與下面的命令（區分大小寫） ：

OCSETUP FailoverCluster-Core OCSETUP FailoverCluster核心

We can verify that the install was successful with the following command (case sensitive):我們可以確認是成功的安裝與下面的命令（區分大小寫） ：

OCLIST OCLIST

With that complete launch the Failover Cluster Administrator MMC from the DC and click on Create  a Cluster under the Management section.與完整的啟動故障轉移群集管理員MMC中的直流，然後點擊創建一個集群下的管理科。

In a recent article I wrote about the Standard User Analyzer, one of the tools available to mitigate app compat issues with UAC.  Some applications require a little more work to get them working and for these situations you can use the Compatibility Administrator which part of the Application Compatibility Toolkit 5.0.  Again it is a pretty straight-forward tool to use once you have collected the required information.  Now before you begin you need to use tools like Process Monitor to determine what is preventing the application from loading and operating properly.  Once you have done that you can use the Compatibility Administrator to create the shim.在最近的一篇文章我寫的有關標準用戶分析器，一個可用的工具，以減輕應用compat問題與UAC功能。有些應用需要多一點工作，讓他們的工作和這些情況您可以使用相容性署長其中的一部分應用程序兼容性工具包5.0 。再次這是一個非常簡單的工具來使用一旦你收集所需的資料。現在開始前，您需要使用工具，如過程監控，以確定什麼是防止應用加載和運行正常。一旦你這樣做，您可以使用相容性署長創造心。

Before you get started I’d suggest looking at the existing database within the tool as there are already a large number of shims created and more being added.  With that in mind launch the tool and click File –> New Database.在您開始之前我建議希望在現有的數據庫內的工具，已經有大量的墊片創造和增加更多。考慮到這一點推出的工具，並點擊文件-> “新建數據庫。

Enter a name for the program as well as the path to the executable and continue through the wizard.輸入一個名稱，程序以及路徑的可執行文件，並繼續通過嚮導。

There are a number of options you can set such as Operating System Mode and so UI mitigations.  Some of還有一些選項可以設置，如作業系統模式和用戶界面減輕。一些

One of the biggest blockers to deployment in application compatibility.  Whether it is a new OS and existing applications or new applications on an existing OS these are they kind of things that drive you nuts.  There are many tools available now to help address these issues, one being the Standard User Analyzer.  With Windows Vista one of the app compat issues that arises is due to User Account Control (UAC).  With this you have two options, disable UAC (which is the worst thing you can do) or use SUA to test the application, detect issues and create shims to mitigate the issues.其中最大的阻滯劑來部署應用程序的兼容性。無論是新的操作系統和現有的應用程序或新的應用現有的操作系統這些都是他們種的東西驅動你堅果。有許多工具現已上市，以幫助解決這些問題，一個是標準用戶分析器。使用Windows Vista的一個應用程序compat問題產生的原因是用戶帳戶控制（ UAC ） 。使用此則有兩種選擇，禁用的UAC （這是最糟糕的事你能做）或使用尿酸測試中的應用，發現問題，並建立墊片，以減輕這些問題。

“The Standard User Analyzer (SUA) tool enables you to test your applications to detect potential compatibility issues due to the User Account Control (UAC) feature in the Windows Vista® operating system.” “標準用戶分析器（尿酸）工具可讓您測試您的應用程序，以發現潛在的兼容性問題，由於用戶帳戶控制（ UAC ）功能的Windows Vista操作系統。 ”

Let’s look at an example of this tool in action with a demo app called Stock Viewer.  When I try to click on the Trends button I get an error when running as a Standard User on Windows Vista.讓我們來看看這方面的一個例子工具中的行動，以所謂的演示應用程序庫存瀏覽器。當我嘗試按一下按鈕的趨勢我得到一個錯誤運行時作為一個標準用戶在Windows Vista上。

The SUA tool is simple enough to use and to start we’ll launch it from the desktop icon and then enter the該尿酸工具是很簡單使用，並開始我們將推出它從桌面圖標，然後輸入