The Microsoft Security Response Center (MSRC) is a world-class resource for managing and resolving security vulnerabilities and security incidents. Individuals, teams, and entire groups around Microsoft make up the MSRC, which uses state-of-the-art technologies and processes to analyze, develop, and deliver quality security updates, tools, and prescriptive guidance to help customers minimize risk from security vulnerabilities and security incidents.

	Managing Security Vulnerabilities
	Responding to Security Incidents
	Information, Guidance, and Tools for You

Managing Security Vulnerabilities

The MSRC is focused on providing customers with top-quality security updates. Through our enhanced, simplified monthly release process, we provide advanced resources and extensive guidance, which allows customers to more easily manage their systems effectively and predictably.

Vulnerability Monitoring

The MSRC is constantly on alert for potential security issues by monitoring security newsgroups and e-mail sent to secure@microsoft.com. We encourage security researchers to report security vulnerabilities responsibly and directly to us, and we collaborate with industry partners in identifying threats and finding solutions.

The MSRC has been at the forefront of numerous improvements Microsoft has made to the security update process, including:

What Happens Before a Release

After we receive a report of a security vulnerability, we begin the following processes:

What Happens During a Release

Microsoft security updates are routinely released on the second Tuesday of each month and made available for download through Windows Update, Automatic Updates, and the Microsoft Download Center. Microsoft also offers enterprise customers free tools to assist in the detection and deployment of security updates, including:

In addition, the MSRC sends notices to customers and partners and posts information to security newsgroups.

What Happens After a Release

Along with ongoing bulletin maintenance, the MSRC provides:

		Announcing the Midsize Partner Incentive Windows Server System Midsize Business Promotion Key Partner Resources Plan Your Business Build and Maintain Expertise Market and Sell Implement and Support Additional Resources

Windows Server System helps you create a more secure and well-managed infrastructure for your customers, while helping them reduce their operational costs and complexity. Help your customers take advantage of a promotional SKU that includes 20% savings on Windows Server 2003 Standard Edition, Exchange Server 2003 Standard Edition, and Operations Manager 2005 Workgroup Edition, designed to meet the needs of midsize businesses (50–250 PCs) for core infrastructure transformation in an easy-to-purchase package. Additionally, if you are a Microsoft Partner Program Registered Member, Certified, or Gold Certified Partner, you can take advantage of theMidsize Partner Incentive, especially designed to help make you successful in selling and implementing this limited time offer (offer expires June 30, 2006). Find out how you can become eligible to receive a free Windows Server System Deployment Guide for Midsize Businesses from Microsoft Press (US$40 in value). Not already a Microsoft partner? There is no fee to join at the Registered Member level and it only takes about 15 minutes to enroll, so sign up today, and take advantage of the Windows Server System Midsize Business Promotion.

Free Windows Server System Deployment Guide for Midsize Businesses Take advantage of the Midsize Business Partner Incentive, especially designed to help make Microsoft Partner Program Registered Members, Certified, and Gold Certified partners more successful in selling and implementing the Midsize Business Promotion (expires June 30, 2006). By participating in this incentive, you can become eligible to receive a free Midsize Partner Deployment Toolkit that includes the Windows Server System Deployment Guide for Midsize Businesses from Microsoft Press (US$40 in value).

	Secure and Well-Managed Infrastructure Campaign Help midsize businesses better secure and manage their infrastructure at a lower cost while taking advantage of their existing investments. Using resources in the Partner Marketing Center, you can build demand for your solutions, identify top market needs, and create customized marketing elements to promote your business.
	Microsoft Open Value Licensing The Microsoft Open Value licensing program is the licensing choice for customers with five or more PCs. Purchasing the Midsize Business Promotion in Open Value offers tiered benefits including around-the-clock technical support for your customers.
	Partner Offers: ISA Server Appliances This download covers the benefits of ISA Server Appliances and specific offers from our OEM Partners. Combined with the Midsize Business Promotion, these offers provide a more cost-effective way to promote a secure and well-managed infrastructure for your customers.
	Help Customers Optimize Their Budgets With Financing Offers from Microsoft Capital Enhance your sales and help your customers get more out of their IT budgets by offering them three-month deferment of payments and interest, from Microsoft Capital. This limited-time offer provides flexibility and an additional incentive for your customers. It is available in the United States, Canada, United Kingdom, Germany, Spain, Belgium, and the Netherlands. NOTE: Customer applications must be completed by March 31, 2006.

	Bill Gates Announces "Centro" for Midsized Businesses Find out about a new infrastructure solution designed specifically for midsize business customers, code-named “Centro.”
	Partner Testimonials On the Midsize Business Promotion Read what other Microsoft partners are saying about the benefits of the Midsize Business Promotion to their business and their customers.
	Strategic IT Services: Looking Beyond the Data Center Companies are finding new ways to use IT to gain a competitive advantage. Read Rick Freedman’s Expert Column explaining how to best engage clients in long-range, strategic IT planning.
	Increase Your Success with Midsize Customers Are you looking for additional business from midsize companies? In one of his most popular Expert Columns, Tim Landgrave explores potential obstacles and ways to overcome them.
	Enroll in the Networking Infrastructure Solutions Competency Are you a technology partner with proven proficiency in implementing solutions based on the Microsoft Windows 2000 Server or Windows Server 2003 operating systems, Microsoft Small Business Server 2000, or Windows Small Business Server 2003? Apply for the Microsoft Networking Infrastructure Solutions Competency, and gain access to a host of valuable customized resources, tools, and information to help you boost your business and that of your customers.

Market and Sell:

	Demo: Group Policy Management Console (GPMC) This customer-facing demo, available for use by partners, shows how the free GPMC tool simplifies the management of group policy by providing a single place for management.
	Demo: Windows Server 2003 Manageability Use this demo to show customers how Windows Server 2003 can help them manage users and servers, deploy software automatically, manage client environments, and automate patch management.
	Microsoft Security Analyzer Tool This application is designed to help organizations with fewer than 1,000 employees assess weaknesses in their IT security environment. Customers receive a list of recommended priorities for investment, and output is matched to Microsoft Guidance and Training, Microsoft Solutions, and Partner Offerings. You can also gain Partner Points for completing customer assessments.
	Total Cost of Ownership Tool The TCO Assessment provides your organization with a simple, step-by-step approach to evaluating and improving your midsize customer’s operational efficiency.
	Microsoft Baseline Security Analyzer (MBSA) MBSA 2.0 is an easy-to-use tool that helps midsize businesses assess their security in accordance with Microsoft security recommendations. MBSA 2.0 also offers specific remediation guidance. Customers can improve their security management process by using MBSA to detect common security configuration errors and missing security updates.
	Microsoft Software Inventory Analyzer Customers can use this tool to generate a software inventory assessment of core Microsoft software installed on their local computer or throughout a network.

Impement & Support:

Additional Resources:

Would you be nervous if you were asked to fill out an online form with your social security number, driver's license number, income tax return, bank statements, and investment records? If you want to use the Web-based version of FAFSA—the United States government's Free Application for Federal Student Aid—you'll need to enter that information and more. So how can you tell whether you're giving this sensitive personal information to the right people? Do you know how to tell the official FAFSA site from other, for-profit services, or from scam attempts?

http://www.microsoft.com/athome/security/privacy/fafsa_security.mspx

On This Page

	Entering personal information on the Web
	Using the FAFSA Web site
	Adding and changing personal information
	Unsolicited e-mail
	Fee-based FAFSA help

Entering personal information on the Web

You should always consider very carefully before entering any personal information on a Web site. When you're filling out a FAFSA, be sure that your Internet browser is set to the highest level of security and that you've got the latest security updates and software.

Using the FAFSA Web site

http://www.fafsa.ed.gov/ is the home page for the Free Application for Federal Student Aid program. It is easily distinguishable from other allegedly FAFSA-related Web sites by its Web address that ends in .gov.

This distinction can help you in two ways:

If you visit the FAFSA site through a suspicious link, or you think you might have stumbled upon a fake FAFSA site, do not click any links on the Web site and close your browser window. Then, open a new browser and go to the Federal Student Aid Web site, http://studentaid.ed.gov/. From there, you can navigate to the FAFSA site by clicking the FAFSA logo on the left navigation bar.

Adding and changing personal information

The only way you can add or change your FAFSA account information online is by visiting http://www.fafsa.ed.gov/ and entering the PIN you received upon application. For more information on how to use your PIN, visit http://www.pin.ed.gov/PINWebApp/pinindex.jsp

Note: It is very important that you not share your PIN, or any information related to it (your social security number and birthday). This information, along with your last name, could allow anyone to access, alter, or disable your financial aid information on the FAFSA Web site.

Unsolicited e-mail

If you receive unsolicited e-mail requesting information from you related to your FAFSA account, or offering additional financial aid deals and services, whomever it appears to be from, keep in mind that:

Fee-based FAFSA help

If you choose to use a fee-based or no-cost service that offers help with FAFSA, be sure to research the service very carefully before providing any personal information or your credit card number. Also consider that, while no site can offer absolute security, the official FAFSA Web site is considered very secure, and it has won numerous awards for best practices on the Internet.

http://www.microsoft.com/athome/security/update/windows_live_safety_center.mspx

Get a free safety scan for your computer

Windows Live Safety Center helps tune up your computer

Windows Live Safety Center is a new service that lets you scan your computer to help protect, clean, and keep it running at its best. The service is free and available directly from the Internet at http://safety.live.com. You can revisit the Windows Live Safety Center for subsequent tune ups as often as you like.

How to use the Windows Live Safety Center

Visit the Windows Live Safety Center, click Full Service Scan, and follow the directions on the screen.

The Windows Live Safety Center scanner is downloaded and installed on your computer the first time you do a scan. The scanner will inspect your computer and then give you results and recommendations when the scan is complete.

To check for updates, you can do another scan whenever you like. These updates will include new versions of the scanner and new virus recognition information (also known as virus definitions) from Microsoft.

If you prefer a customized service, click one of the following icons.

Protection. Helps check for and remove viruses.

Clean up. Helps get rid of the junk on your hard disk.

Tune up. Helps improve your computer's overall performance.

Other features of the Windows Live Safety Center

In addition to the free security scans, Windows Live Safety Center also provides:

For more information, see Frequently asked questions about Windows Live Safety Center.

What next?

You can return to the Windows Live Safety Center to run the Full Service Scan or one of the individual scans as often as you like. If you would prefer to have this scan running silently in the background, you can subscribe to Windows OneCare, which will give you a clear, continuous indication of your computer's overall level of protection and performance. For more information, visit the Windows OneCare Web site.

Great Licensing info you must have!

• Licensing Overview: An overview of Microsoft Volume Licensing, the various licensing programs, links to Volume License Keys, Licensing Solutions Competency information, and Frequently Asked Questions
• Licensing Options: Licensing information for small and midsize businesses, large businesses, and a list of all licensing programs
• Licensing for Applications, Systems, and Servers: An explanation of licensing as it applies to applications, systems and servers
• Software Asset Management: An overview and links to information about how you can provide SAM solutions and services to your customers
• Licensing Training: Online and Web-based resources that can help you acquire licensing and SAM training
• Tools and Resources: Tools and resources that can help you develop your licensing solutions business

• Microsoft Licensing Reseller Handbook : A comprehensive guide to help you understand licensing options and provide the best licensing recommendations to your customers
• License Quote Configurator: A tool that can help you produce quotes containing part numbers, product descriptions, and estimated retail prices so that you can provide your customers with multiple, accurate licensing scenarios
• Customer Account Administration Services: Tools to help you assist customers with their license administration

• How-to articles that can help you recommend and implement Licensing and SAM solutions
• Featured articles and case studies to help you identify opportunities and customer scenarios
• Articles from Microsoft product managers
• Links to training, tools and resources
• Quick links to valuable references

Check out this info and much more on Windows Vista at the official Windows Vista Site!  Here is the link!

http://www.microsoft.com/windowsvista/default.mspx

Security is fundamental to the Windows Vista architecture. With Windows Vista, you can connect to whomever you want and do the things that you want to do, confident that Windows Vista is keeping your information and your computer safe.

Windows Vista security features protect against the latest generation of threats, such as worms, viruses, and spyware. In the unlikely event of a successful attack, Windows Vista ensures that the effect is minimal.

Parental Controls

Windows Vista introduces a rich set of parental control features, providing powerful tools to help parents monitor, manage, and administer their children's computer usage to keep them safe.

User Account Protection

Windows Vista User Account Protection bridges the gap between user and administrative privileges by allowing you to run applications under a standard user account. When you need to perform an administrative task, such as install software or drivers, Windows Vista prompts you to confirm your intentions or to provide your credentials.

For example, if you're on the road and download a game that is really a Trojan horse, Windows Vista prevents the game from performing malicious tasks because you lack sufficient privileges to install it. When you need to install a printer driver for the hotel printer, Windows Vista prompts you to verify that you really want to install the printer.

This protection, combined with the new protected mode features in Internet Explorer, reduces the impact of viruses, spyware, and other types of malicious software (collectively known as "malware").

Custom Authentication Mechanisms

For many organizations, authenticating users with a user name and password is no longer sufficient to ensure the necessary level of security. Windows Vista has improved Smart Card support and makes it simpler for developers to implement custom authentication mechanisms such as biometrics and tokens.

Firewall

Windows Vista provides outgoing as well as incoming filtering, which can be centrally managed via Group Policy. This lets administrators control which applications are allowed to or are blocked from communicating on the network. Controlling network access is one of the most important ways to mitigate security risks.

Internet Explorer

Windows Vista will build upon the User Account Protection initiative to limit Internet Explorer to just enough privileges to browse the Web, but not enough to modify user files or settings by default. This Windows Vista-only feature, known as Protected mode, will be in Beta 2. As a result, even if a malicious site attacks a potential vulnerability in Internet Explorer, the site's code won't have enough privileges to install software, copy files to the user's Startup folder, or hijack the settings for the browser's homepage or search provider.

Data Protection

Theft or loss of corporate intellectual property is an increasing concern for organizations. Windows Vista has improved support for data protection at the document, file, directory, and machine level. The integrated Rights Management client allows organizations to enforce policies around document usage. The Encrypting File System, which provides user-based file and directory encryption, has been enhanced to allow storage of encryption keys on Smart Cards, providing better protection of encryption keys. In addition, the new full volume encryption enterprise feature adds machine-level data protection.

Email

The Windows Vista e-mail client addresses serious concerns such as spam and attachment viruses, while adding features to enable you to search and manage the increasingly large number of messages you receive.

The e-mail client includes a built-in spam filter which is effective from day one and does not require you to train or configure it. You'll find e-mail intuitively and almost instantly with the powerful, embedded Quick Search box. You can also search your e-mail alongside other files in the Search Explorer. All messages are maintained in a new message store which provides significantly improved reliability over Outlook Express.

Protection from Malware

IT departments and individual users spend significant time and resources solving problems caused by malware as well as trying to detect and prevent problems before they happen. Windows Vista includes powerful features that can prevent, detect, and remove malware before it causes problems. The result: improved computer performance, fewer support calls, and improved security.

Note that the built-in anti-malware detection, cleaning, and real-time blocking are primarily targeted at individual users. Windows Vista does not include enterprise management for anti-malware via group policy beyond enabling or disabling the protection.

Network Access Protection

Viruses and worms can attack a protected internal network through mobile computers that do not have the latest updates, security configuration settings, or virus signatures downloaded. Mobile users may connect to unprotected networks at hotels, airports, or coffee shops, where their computers can become infected by malware or a virus. The Network Access Protection agent in Windows Vista, along with the Network Access Protection infrastructure, which will be included with Longhorn Server, will prevent computers from connecting to an internal network until configured system health criteria (such as the latest operating system or virus signature updates or security configuration settings) are met.

Windows Services Hardening

In the unlikely event that an attacker identifies and exploits a vulnerable service, Windows Service Hardening limits the damage. It does so by preventing a compromised service from changing important configuration settings in the file system or registry or from infecting other computers on the network. For example, the Remote Procedure Call (RPC) service can be kept from replacing system files or modifying the registry.

Exchange Server 2003 Service Pack 2 (SP2) offers new features and improvements to Exchange Server 2003, including support for mobility and message hygiene. Improvements have been made to address performance and reliability with public folders and with database size restrictions. Links to downloads are now available on the SBS 2003 product Web site.

	Microsoft Dynamics is the new product brand for our leading business applications formerly titled Microsoft Business Solutions. Learn more about the evolution of the brand strategy, and use these resources to help you deliver comprehensive business management solutions that bring benefits to your customers faster than ever. Microsoft Dynamics Industry Opportunities Microsoft Dynamics CRM PartnerSource Microsoft Business Solutions Competency   News and Announcements:   Introducing Microsoft Dynamics Microsoft Dynamics, the replacement brand for Microsoft Business Solutions, represents the research and development road map, formerly code-named "Project Green." We are now introducing the new Microsoft Dynamics logo signature. Learn how the new brand will more effectively help you promote your offerings, and how to present it in your marketing materials.
	Microsoft Business Solutions Technical Presales Advisory Group (TPAG) The Microsoft Business Solutions TPAG can help you identify possible issues with your pre-sales proposal before you present it to your customer. Comparing the proposal with industry standards and Microsoft best practices can help you leverage the experience of others.
	Microsoft Dynamics On-Demand Webcasts Strengthen your Microsoft Dynamics line of business without leaving your desk. Access on-demand webcasts to see demos and training on software such as CRM, Great Plains, Navision, and Solomon.

Featured Solutions:

Industry Opportunities Microsoft is the largest ERP vendor selling through a partner channel. As a result, you can meet your customers’ business requirements more completely, as well as gain access to new market opportunities. We designed the Microsoft Dynamics applications to be highly customizable, so your customers get a solution that really works for them — a solution that builds their trust and business with you, the partner.

Customer Relationship Management (CRM) Learn how to help your clients use CRM solutions to build and manage relationships so they can respond promptly to customer needs and adapt quickly to new opportunities.

Microsoft Business Management Solutions Automate and help improve financial, customer relationship, and supply chain management for your customers with Microsoft Dynamics.

Additional Resources: