February 21, 2009

10 mistakes new Windows administrators make

  • Date: December 15th, 2008
  • Author: Debra Littlejohn Shinder

Whether you’re new to network administration or to the Windows environment, a few common oversights and mistakes can trip you up. Deb Shinder explains how to avoid some of the problems new Windows admins often encounter.


Maybe you’re a brand new network admin. You’ve taken some courses, you’ve passed some certification exams, perhaps you even have a Windows domain set up at home. But you’ll soon find that being responsible for a company network brings challenges you hadn’t anticipated.

Or maybe you’re an experienced corporate IT person, but up until now, you’ve worked in a UNIX environment. Now — either due to a job change or a new deployment in your current workplace — you find yourself in the less familiar world of Windows.

This article is aimed at helping you avoid some of the most common mistakes made by new Windows administrators.

Note: This information is also available as a PDF download.

#1: Trying to change everything all at once

When you come into a new job, or start working with a new technology, you may have all sorts of bright ideas. If you’re new to the workplace, you immediately hone in on those things that your predecessors were (or seem to have been) doing wrong. You’re full of all the best practices and tips and tricks that you learned in school. If you’re an experienced administrator coming from a different environment, you may be set in your ways and want to do things the way you did them before, rather than taking advantage of features of the new OS.

Either way, you’re likely to cause yourself a great deal of grief. The best bet for someone new to Windows networking (or to any other job, for that matter) is give yourself time to adapt, observe and learn, and proceed slowly. You’ll make your own job easier in the long run and make more friends (or at least fewer enemies) that way.

#2: Overestimating the technical expertise of end users

Many new administrators expect users to have a better understanding of the technology than they do. Don’t assume that end rx cialis low price users realize the importance of security, or that they will be able to accurately describe the errors they’re getting, or that they know what you mean when you tell them to perform a simple (to you) task such as going to Device Manager and checking the status of the sound card.

Many people in the business world use computers every day but know very little about them beyond how to operate a few specific applications. If you get frustrated with them, or make them feel stupid, most of them will try to avoid calling you when there’s a problem. Instead they’ll ignore it (if they can) or worse, try to fix it themselves. That means the problem may be far worse when you finally do become aware of it.

#3: Underestimating the technical expertise of end users

Although the above applies to many of your users, most companies will have at least a few who are advanced computer hobbyists and know a lot about technology. They’re the ones who will come up with inventive workarounds to circumvent the restrictions you put in place if those restrictions inconvenience them. Most of these users aren’t malicious; they just resent having someone else in control of their computer use — especially if you treat them as if they don’t know anything.

The best tactic with these users is to show them that you respect their skills, seek out their input, and let them know the reasons for the rules and restrictions. Point out that even a topnotch racecar driver who has demonstrated the ability to safely handle a vehicle at high speed must abide by the speed limits on the public roads, and it’s not because you doubt his/her technology skills that you must insist on everyone following the rules.

#4: Not turning on auditing

Windows Server operating systems have built-in security auditing, but it’s not enabled by default. It’s also not one of the best documented features, so some administrators fail to take advantage of it. And that’s a shame, because with the auditing features, you can keep track of logon attempts, access to files and other objects, and directory service access.

 Active Directory Domain Services (AD DS) auditing has been enhanced in Windows Server 2008 and can be done more granularly now. Without either the built-in auditing or third-party auditing software running, it can be almost impossible to pinpoint and analyze what happened in a security breach.

#5: Not keeping systems updated

This one ought to be a no-brainer: Keeping your servers and client machines patched with the latest security updates can go a long way toward preventing downtime, data loss, and other consequences of malware and attacks. Yet many administrators fall behind, and their networks are running systems that aren’t properly patched.

This happens for several reasons. Understaffed and overworked IT departments just may not get around to applying patches as soon as they’re released. After all, it’s not always a matter of “just doing it” — everyone knows that some updates can break things, bringing your whole network to a stop. Thus it’s prudent to check out new patches in a testbed environment that simulates the applications and configurations of your production network. However, that takes time — time you may not have.

Automating the processes as much as possible can help you keep those updates flowing. Have your test network ready each month, for instance, before Microsoft releases its regular patches. Use

Windows Server Update Services (WSUS) or other tools to simplify and automate the process once you’ve decided that a patch is safe to apply. And don’t forget that applications — not just the operating system — need to be kept updated, too.

#6: Getting sloppy about security

Many administrators enforce best security practices for their users but get sloppy when it comes to their own workstations. For example, IT pros who would never allow users to run XP every day logged on with administrative accounts think nothing about running as administrators themselves while doing routine work that doesn’t require that level of privileges. Some administrators seem to think they’re immune to malware and attacks because they “know better.” But this over confidence can lead to disaster, as it does in the case of police officers who have a high occurrence of firearms accidents because they’re around guns all the time and become complacent about the dangers.

#7: Not documenting changes and fixes

Documentation is one of the most important things that you, as a network admin, can do to make your own job easier and to make it easier for someone else to step in and take care of the network in your absence. Yet it’s also one of the most neglected of all administrative tasks.

You may think you’ll remember what patch you applied or what configuration change you made that fixed an exasperating problem, but a year later, you probably won’t. If you document your actions, you don’t have to waste precious time reinventing the wheel (or the fix) all over again.

Some admins don’t want to document what they do because they think that if they keep it all in their heads, they’ll be indispensible. In truth, no one is ever irreplaceable — and by making it difficult for anyone else to learn your job, you make it less likely that you’ll ever get promoted out of the job.

Besides, what if you got hit by a truck crossing the street? Do you really want the company to come to a standstill because nobody knows the passwords to the administrative accounts or has a clue about how you have things set up and what daily duties you have to perform to keep the network running smoothly?

#8: Failing to test backups

One of the things that home users end up regretting the most is forgetting to back up their important data — and thus losing it all when a hard drive fails. Most IT pros understand the importance of backing up and do it on a regular schedule. What some busy admins don’t remember to do regularly is test those backups to make sure that the data really is there and that it can be restored.

Remember that making the backup is only the first step. You need to ensure that those backups will work if and when you need them.

#9: Overpromising and underdelivering

When your boss is pressuring you for answers to questions like “When can you have all the desktop systems upgraded to the new version of the software?” or “How much will it cost to get the new database server up and running?”, your natural tendency may be to give a response that makes you look good. But if you make promises you can’t keep and come in late or over budget, you do yourself more damage than good.

A good rule of thumb in any business is to underpromise and overdeliver instead of doing the opposite. If you think it will take two weeks to deploy a new system, give yourself some wiggle room and promise it in three weeks. If you’re pretty sure you’ll be able to buy the hardware you need for $10,000, ask for $12,000 just in case. Your boss will be impressed when you get the project done days ahead of time or spend less money than expected.

#10: Being afraid to ask for help

Ego is a funny thing, and many IT administrators have a lot invested in theirs. When it comes to technology, you may be reluctant to admit that you don’t know it all, and thus afraid — or embarrassed — to ask for help. I’ve know MCSEs and MVPs who couldn’t bear to seek help from colleagues because they felt they were supposed to be the “experts” and that their reputations would be hurt if they admitted otherwise. But plunging ahead with a project when you don’t know what you’re doing can get you in hot water, cost the company money, and even cost you your job.

If you’re in over your head, be willing to admit it and seek help from someone more knowledgeable about the subject. You can save days, weeks, or even months of grief by doing so.

Permalink • Print • Comment

10 things you should know about Microsoft’s revised certification program

  • Date: December 15th, 2008
  • Author: Erik Eckel

Microsoft has made some fairly big changes to its certification program. If you’re in the midst of pursuing accreditation — or you’re thinking of heading down one of the new paths — check out this rundown of new features.


Microsoft’s products weren’t the only items receiving a makeover in 2008; certifications saw significant changes as well. In addition to several new tracks, Microsoft introduced some long-sought features to its accreditation program.

What prompted the changes? Redmond executives say IT managers indicated that the number and variety of credentials made it difficult to understand which best suited their organizations, while individuals pushed for accreditations that enabled them to better stand out.

Microsoft’s new generation of certifications aims to address these concerns with accreditations that more accurately measure and describe an individual’s real-world skills, making it easier for hiring managers to identify the specific talent they require. The changes kick in with the client and server products succeeding Windows Server 2003.

Keeping the changes straight can prove confusing. Here are 10 aspects of Microsoft’s revised certification program to help you get up to speed and make the right decisions.

Note: This information is also available as a PDF download.

#1: New logos can be customized

Whereas one icon was used in the past to denote a specific certification and potential broad area of expertise — such as with an MCP who could denote skill associated with anything from Windows 98 to Windows XP — the new-generation certifications feature customizable logos. While that may not seem like a big deal at first, it’s a major improvement for certified professionals seeking to differentiate themselves from others on their Web sites, their stationery, and their business cards, not to mention consultants’ advertising.

Legacy logos used for Microsoft Certified Systems Administrators (MCSAs), MCSEs, and others remain valid. But a new Logo Builder enables candidates earning new-generation credentials to denote their specific areas of expertise.

For example, a new Technology Specialist’s logo will feature the Technology Specialist logo on the icon’s left side. But space at the right-side will now be reserved to indicate the specific job role (such as server administrator versus enterprise administrator) or technology (Windows Server 2008 versus Microsoft Exchange Server 2007) the certification covers. This should help ensure that new-generation credentials are more easily understood and prove more relevant to the holder and to human resources staff, hiring managers, and IT departments.

#2: MCTs are affected

Changes to Redmond’s certification program affect Microsoft Certified Trainers (MCTs), too. While MCTs need not earn new-generation certification to maintain their current MCT status, many will find they must now earn new, specialized certifications to teach the new courses.

MCT competencies require only new Professional Series credentials; technical specialist credentials will not be necessary to serve as an MCT. However, Microsoft’s new generation certification paths require that their courses be taught by appropriately accredited instructors.

Instructor requirements must be met within 90 days of a Professional Series accreditation being introduced. MCTs who don’t meet the competency requirements in time will not be authorized to lead training courses until they earn the required certifications, at which point they will be reauthorized. You can find out more about MCT competencies on Microsoft’s Web site.

#3: Exams are changing

Certification candidates can expect big changes in exams, too. Microsoft claims the new Technology Specialist exams, for example, delve more deeply into the features, functions and how-to skills required to effectively manage product technologies. Redmond training staff always encouraged candidates to have real-world experience with the technologies they’re attempting to gain certification for; that hands-on expertise now becomes even more important.

In addition to other traditional certification preparation efforts, candidates will now be required to complete three weeks of comprehensive classroom training for some accreditations. Taking a page out of other vendors’ programs, some credentials (such as those within the Master Series path) now require also passing a hands-on lab examination. Others, such as those within the Architect Series path) require passing an oral examination presented by a board of certified architects.

All the new examination elements, along with more emphasis on exam security, are designed to add rigor and value to Microsoft certifications and increase relevance of the certs in the marketplace.

#4: You can maintain your current credential path

What should candidates do if they’re already working toward a different certification? Microsoft recommends IT professionals follow their current certification paths to completion, saying that the certification remains a relevant credential and upgrade options will be available.

Older certifications that did not carry retirement dates remain valid. Thus, there’s no need to renew an older credential (such as a Microsoft Certified Professional or MCSE accreditation) that didn’t retire.

If IT pros are worried that they may not be able to devote the time, energy, or resources to maintaining one of the new-generation certifications, they might want to consider refocusing their efforts to complete their current path. But the newer credentials are likely to provide greater distinction, so someone who has just begun a certification path might want to weigh migrating to the new certification path instead. For more information on Microsoft’s certification paths, see this overview.

#5: Existing certified pros are not automatically entered in new tracks

Those candidates already certified or working to complete a different certification path will find they are not automatically transferred or somehow migrated to the new credential program. The new-generation certifications constitute new training and exam methods, and many boast new lab or review board requirements. Those professionals interested in earning Microsoft accreditation must recognize the new tracks are just that: new tracks that require passing new and different exams.

#6: Second Shot enables free exam retakes

Another certification change is Microsoft’s Second Shot benefit, which offers candidates discounts and free exam retakes. The trick is to get registered before December 31, 2008.

Registered candidates passing Microsoft certification exams before December 31, 2008, on their first attempt are eligible for a 25 percent discount on a different exam. The discounted exam must be taken before February 28, 2009.

Second Shot also extends benefits to those failing a Microsoft exam. Registered candidates who fail a certification exam on their first try can attempt a free retake until June 30, 2009.

#7: New certifications introduce lifecycle policies

For the first time, Microsoft is introducing certification lifecycles. New Microsoft certifications, including the Microsoft Certified Technology Specialist (MCTS, which is the designation attached to the new Technology Series), MCITP, and MCPD accreditations, will all retire when mainstream support for the corresponding technology retires.

Such certifications will then be listed on official transcripts as retired credentials. When credentials retire, they can no longer be used to download marketing materials, logos, and other otc cialis related information. Holders of older credentials, including Microsoft Certified Professional (MCP), Microsoft Certified Systems Engineer (MCSE), and Microsoft Certified Application Developer (MCAD), are not affected.

#8: New-generation certifications emphasize four series

The new-generation certifications are broken into four series:

  • The Technology Series helps IT pros showcase specific technology skills, knowledge, and expertise. IT managers should have confidence that a Microsoft Technology Specialist is “consistently capable of implementing, building, troubleshooting and debugging a particular Microsoft technology.” Typically, one to three exams must be passed to earn this non-job-role specific designation, which will expire when Microsoft suspends mainstream support for the related product or technology.
  • The Professional Series helps IT pros showcase skills, expertise, and knowledge in a specific job role, such as project management, operations management, and planning. IT managers should have confidence that, “by validating a more comprehensive set of skills, these credentials give candidates and their hiring managers a reliable indicator of on-the-job performance.” Typically, one to three exams must be passed to earn this designation, which will expire when Microsoft suspends mainstream support for the related product or technology.
  • The Master Series helps seasoned technology professionals denote their ability to design and implement complex business solutions. Microsoft touts the new program as being advanced and requiring experience-based training and testing. Candidates must pass prerequisite Technology and Professional Series exams, attend and complete three weeks of classroom training, and pass a qualification lab exam. This designation is focused on a single technology platform, such as Microsoft Exchange Server 2007, Windows SQL Server 2008, or Microsoft Office SharePoint Server 2007.
  • The Architect Series is for seasoned IT pros with 10 or more years of technology experience (with three or more years experience as a practicing architect). Candidates must possess both strong managerial and technical skills. Designed by the architect community, the certification requires candidates to pass peer review boards. Candidates must work closely with an MCA mentor and pass an oral review before a board of certified architects and must regularly refresh the accreditation.

#9: Two Professional Series credentials are available

Two credentials introduce the Professional Series, and more may be added. The first two are Microsoft Certified IT Professional (MCITP) and Microsoft Certified Professional Developer (MCPD).

MCITP accreditation is available for a variety of fields of expertise. Job roles include database administrator, consumer support technician, server administrator, and enterprise administrator.

MCPD accreditation is for programmers who plan to develop applications using Visual Studio 2008 and the Microsoft .NET Framework 3.5. Three paths are available: MCPD: Windows Developer 3.5; MCPD: ASP.NET Developer 3.5; and MCPD: Enterprise Applications Developer 3.5.

#10: New-generation certifications have a threefold goal

Microsoft says that its new certifications emphasize technology skills and job roles. The new accreditations are designed to minimize the overall number of certifications, while enabling IT professionals to highlight their specializations. The program’s certification changes encompass three goals:

  • Microsoft is working to better target its accreditations while keeping them flexible. Toward that end, the new certification tracks tend to be shorter and more focused on specific, common job roles.
  • Redmond’s training executives seek to protect and improve rigor (thoroughness) and credibility. Look for new testing technologies, such as the performance-based testing introduced with some Windows Server 2003 exams, to become more prominent. And by better matching tracks to real-world job roles, Microsoft hopes to bolster credibility.
  • Microsoft is aiming for relevance and simplicity. Lifecycle policies are being introduced for the first time, which among other changes will help aid relevance. Redesigned accreditations and logos, meanwhile, will better communicate demonstrated skills and knowledge.
Permalink • Print • Comment

10 things you should do before, during, and after reinstalling Windows

  • Date: October 15th, 2008
  • Author: Alan Norton

Get the latest Flash Player to see this player.

Whether you are talking about your tech-novice family members or an international corporate enterprise, you will have to reinstall Microsoft Windows at some point. Take steps to ensure a smooth install.

————————————————————————————————

There are some very good reasons why you might want to reinstall Microsoft Windows. Whether it is 2000, XP, or Vista, the registry can become corrupted or it can accumulate settings for programs long-since forgotten, leading to sluggish performance. Or you can find yourself with a stubborn Trojan Horse. The only way to be 100 percent sure that you have rid yourself of some particularly nasty viruses is to reload Windows.

I have wanted to document the steps needed to properly reinstall Windows for a long time now. I always end up missing something after the reload and find myself scrambling to find IDs, passwords, configuration settings, or favorite Web sites lost in the reinstall.

Be sure to set aside a large block of time to do the reinstall. Don’t do it before a term paper is due or your business presentation slide show. A weekend is a good time.

An OS reinstall is also a good time to decide to upgrade. If you want to upgrade to Vista, there are a lot of options available to you. For more information about these options and the pros and cons of Vista, please read Vista Confusion.

This article focuses on Vista but the concepts apply to all versions of Window. This blog post is also available in PDF format in a TechRepublic download.

When you run the Windows Vista set-up program, you will see a window with two options: Update and Custom (Advanced). The Update option is not available when reinstalling Windows Vista. Under the Custom option, you will be doing what is known as a Clean Install. Follow these 10 steps and you will, hopefully, not find yourself having to scramble for files or information that you need after the reinstall.

Please Note: I have gone to great care to test and retest this documentation. It is still possible that there are errors or missing information or that I have not covered your specific reinstallation configuration. Please provide feedback in the forum if you find any issues.

Before reinstallation

1. Document your login IDs, passwords, and settings.

If you are using your browser to store the passwords for Web sites, you will be in for a rude awakening after reinstalling Windows — they will be gone. Your browser is a poor place to keep your Web site IDs and passwords.

One possible option is to store your information in a spreadsheet. However, if you keep your IDs and passwords in a password-protected Excel or OpenOffice Calc spreadsheet, be aware that there are programs that can recover/discover the password for most .xls files. I suggest you use stronger encryption techniques to better protect Excel 2002, 2003, and 2007 spreadsheets.

If you do have Excel 2002 or later, secure your spreadsheet from hackers and then make sure you don’t lose your password! Next, add your IDs and passwords. Create a row in your spreadsheet for your ISP, e-mail, Web hosting company, personal Web sites, and any other password-protected logins. This file is also a good place to keep your e-mail POP3, SMTP, and newsserver name.

If you don’t have Excel you can keep the IDs and passwords on a piece of paper securely locked away in a safe place or you can choose one of the software alternatives available. RoboForm is a popular way to secure your browser login user name and password but is not freeware. GuardID Systems offers a product called ID Vault that is supposed to be a secure way to store your IDs and passwords — for a small price. Do not keep your IDs and passwords in a Notepad or Word document unsecured and “in the clear,” readable by anyone with access to your computer or to a hacker.

2. Export your e-mail and address book, bookmarks/favorites, and cookies.

You can export your e-mail and contacts from Outlook Express, Outlook, MS Mail, and most third-party e-mail programs. I have a folder called Mail Exports under my Archive folder where I export my e-mail. You can export from the various mailboxes. Select the Inbox, Outbox, Sent Items, and Drafts. Unless you have a special reason otherwise, you can exclude the Deleted and Junk mail boxes.

I don’t bother exporting my contacts. If I need a contact, I pull it up from an archived e-mail. You might want to export your contacts though, especially if you have a large number.

I used to always forget about bookmarks for my favorite Web sites. I had to spend time searching for a favorite site after Windows was reinstalled. I made a promise that I would export my IE Favorites and Firefox Bookmarks the next time I did a Windows reinstall. You can also export feeds and cookies.

3. Download the latest applications and drivers.

There is a core set of applications that you know you will be using. One good way to identify these core apps is to take a look at your desktop and Start menu. You can save an image of your desktop to a non-system folder and use that as a guide to reinstalling your core apps. You can also look at your installed programs in Programs and Features located in the Control Panel.

I have a logical drive named Documents and on that drive a folder called Downloads. I keep all my apps and drivers downloaded from the Internet there. These add up in a hurry. To keep it organized, I have a lot of subfolders including one for Apps and one for Drivers.

Once you have a list of your core apps, download the latest versions from the Internet and save them to your \Downloads\Apps folder or a non-system folder of your choice.

Some of your core apps may be on DVD, CD, or even floppy. Pull out your media and set it in a stack ready for reinstallation later.

Download the latest version of your favorite anti-virus software. I like Alwil Software’s Avast! The free home version includes real-time protection for e-mail, instant message, Web browser, Outlook Exchange, and four other types of real-time protection. If you can, download a file containing the latest virus definitions.

How do you know what drivers you will need? There are two basic types of drivers. I separate them here because updating them is usually handled differently:

Motherboard Specific Drivers – Auto Update

  • System and Chipset (usually Intel)
  • Onboard Sound
  • Onboard Video (some motherboards)
  • Onboard LAN

Many motherboard manufactures and computer vendors have an application that will check all the motherboard-related drivers to see if they are current. If your manufacturer or vendor provides this type of application, go to their Web site and download the latest version now.

If you don’t have access to an update utility, you have to manually identify the motherboard-related drivers that you will need:

Other drivers – Manual Update

  • Sound Card (if your computer has a sound card)
  • Video Card (if your computer has a video card)
  • Modem
  • RAID (Intel Matrix RAID, JMicron RAID, or other if you have a RAID-controller card)
  • Other Unique Devices

If you do not already know the type of video card, sound card, modem, RAID, or other unique devices in your system, you can identify them by opening the Device Manager (Figure A).

Figure A

The expanded items in the Device Manager show the devices installed on my computer requiring a manual driver download and install.

If you aren’t running RAID, you should not need to identify any Storage controllers. If you are running RAID, you will need to have the driver file available on a floppy disk or CD if installing XP or previous versions of Windows. You also need to know the exact driver/controller name — Intel 82801 GR/GH SATA RAID for my system. Unlike previous versions of Windows, Vista recognizes your hard drives during setup and you can get your RAID drivers from there.

I don’t have a sound card in my system, but if you do, expand the Sound, video and game controllers item to determine the sound card installed in your computer.

Mike Smith has put together a handy Windows Reinstall Checklist (PDF) that you might want to print and use.

After identifying the drivers you need to install, download them and save them to a non-system logical drive. Do not pull them from old floppies or CDs unless you are sure that new drivers are not available.

4. Housecleaning and backing up your data.

Now is the time to clean up your hard drive by deleting unneeded or unwanted files. Cleaning up years of accumulated files that you no longer need or want is no fun. If you want to make it less of a chore, you can start a week or more in advance of the reinstall. Spend one or two hours each day deleting the files you are sure that you want to send to the great bit-bucket in the sky.

This is also an excellent time to do a thorough anti-virus scan of all your drives. You don’t want to back up infected files.

Then do a full backup, which is easy for me to say, right? You can spend hours doing a full backup, but this is a good investment of your time. Back up anything that you don’t want to lose. It is especially important if you are one of the unfortunate ones without a Windows OEM disc or a vendor reinstall disc. Many computer vendors put the Windows setup and installation files on a separate partition or folder on the hard drive. If you have a vendor built computer, Windows Reinstall – OEM Computers is a must-read.

If you will be reinstalling Vista on a different partition, you will need almost 15GB of free space minimum on a logical drive/partition to load Vista. I like to create a partition of 30-40GB for the 32-bit version of Vista and 40-50GB for the 64 bit version. Do a full format of the logical drive/partition that will be your new system partition so that you will have a clean Vista-ready partition.

Warning! If you will be dual booting using XP and Vista, do not use XP to create the partition that you will install Vista on. For a very helpful guide to issues dual booting XP and Vista please read Dual Booting Windows Vista & Windows XP by Bert Kinney.

5. Service packs

As of October 2008, the latest service packs are SP3 for XP and SP1 for Vista. There are five ways to retrieve and install the latest service packs. Some of these methods reduce or eliminate your risk to security vulnerabilities. Some are alternative methods you can use if you are having problems installing the service pack from Windows Update. If you are not concerned about either of these two issues, you can skip this section entirely and move on to item 6.

There are five ways to get the latest Windows service pack:

  • Download it via Windows Update
  • Download it from the Microsoft Web site
  • Order it on CD/DVD disc
  • Order the latest copy of Windows that includes the latest service pack (should be noted in the product description)
  • Install Windows Server Update Services (WSUS) or the System Center Configuration Manager (SCCM) if available and if the computer is networked on a local Intranet

The update is much smaller when done through the Update utility found in the Control Panel. I planned to recommend that it is best to download the latest service pack and install it manually. Doing this would install important security updates in the service pack before connecting to the Internet. After a request for information from Microsoft I received the following response as to why that is not recommended:

“Microsoft strongly recommends using Windows Update to download and install Windows Vista SP1 on single PCs.

If a customer prefers to install Windows Vista SP1 from a DVD and has Internet access, they should first visit Windows Update and install all recommended and optional drivers and updates (the SP1 DVDs will have this advice on their packaging). To order Windows Vista SP1 on DVD, which costs $3.50 for shipping and handling, customers may visit the SP1 order page.

Customers should know that the install program on the DVD does not include the same logic that Windows Update uses to check for device drivers prior to SP1 installation. To make this change, the installer would need to be substantially modified, which would take a significant amount of time. Additionally, one of the benefits of Windows Update is that it can dynamically add or remove filtered devices over time, as is necessary. If the DVD were to ship with the set of filters included, they could not be added or modified as the driver landscape changed over time.

We also want customers to know that if they have any problems during or after installing SP1, they can call Microsoft Customer Support Services (CSS) free of charge with questions or for help.”

Note the emphasis added. Both options require connecting to the Internet before installing SP1.

I spoke with a Microsoft technician specializing in Windows Update. He informed me that there are two primary reasons why you might want to manually install SP1. I added reason three as my reason for a manual install.

  1. You cannot download SP1 from Windows Update or it will not install properly.
  2. During high demand times SP1 may not be available to some users for up to a week or possibly longer due to a limitation placed on the number of downloads.
  3. You want the security updates included in SP1 installed before connecting to the Internet.

The technical representative understood why I might want to install SP1 so that my system would be more secure before connecting to the Internet. He said it was possible to do this. However, SP1 does not include all the security patches since its release, even if you download it today. You will still have to start Windows Update to get these security updates.

In case you were wondering, SP1 installs 23 important security updates and 551 hot fixes, and some of those security updates are cumulative. If you want a closer look at the details, you can review Hotfixes and Security Updates Included in Windows Vista Service Pack 1.

The service packs for Vista are large — 434.5 MB for the 32-bit version and 726.5 MB for the 64-bit version. If you are still using dial-up you might be able to download the 32-bit version, but it would be easier to have a friend with broadband download the 64-bit version for you. Read the knowledge base article KB936330 carefully before installing the service pack.

I downloaded the Vista 64 bit SP1, and it took approximately 42 hours over four days. Oh the sacrifices I make for you, my patient reader! Use a download manager if you want to download the Vista service pack. I don’t recommend you do this over dial-up. At $3.50, just order the SP1 CD or DVD.

During reinstallation

6. Load Windows.

Tip: When installing Vista in Windows, the installer takes over the entire screen. But you can still have access to Windows and features like Disk Manager by clicking on the [Windows] key. I have not had problems doing this when stuck and needed information or wanted to delete files on the target partition or format the target partition, but it might be dangerous to do while the installer is busy.

Don’t forget to have your product key handy. If you have a RAID setup you will need to load the RAID drivers (be sure to get the right driver — 32 bit or 64 bit) and know the RAID controller name. For more information about installing Windows on a RAID system see Want Speed and Data Safety? Consider RAID. Rarely, you may have to have drivers for a device where Windows will be installed. As an example, some older motherboards require that you load SATA drivers in order to recognize SATA drives.

Perhaps the best way to reinstall Windows is the simple and straightforward “insert Windows disc into optical drive, format target partition and install to target partition” method. You should, if you can, start with a nice clean partition to install Windows on.

You can reinstall Vista from within your current Vista installation in addition to the traditional CD/DVD bootup install. If reinstalling from within Windows, connect to the Internet so the installer can check online for the latest installer updates.

You can replace your existing installation, even from within the existing installation, or you can load Windows onto a different partition that you prepared in item four. If you do reinstall Windows in a different partition, the original installation must be removed per the EULA. You cannot format the target partition if it is the same as the one with the current Windows installation.

Starting with Vista, the system boot files and boot manager are located in a folder called Boot. Gone is boot.ini, and replacing it is something called a Boot Configuration Data store(BCD). If you are running a dual-boot system the Boot folder may not be located on logical drive C:\. The boot files are system files and will be hidden unless you have unchecked Hide protected operating system files when configuring Explorer. If you want to load Windows onto a different logical drive, be careful that you do not delete the Boot folder when removing the original Windows installation. You also do not want to format the logical drive where the Boot folder is located.

Tip:  Microsoft includes a comprehensive help file called Installing Windows. It is a good idea to read this before reinstalling Windows.

After reinstallation

7. Reconfigure personal settings.

I have a routine that I follow — one that I developed over the years. Personal settings are, well personal. I have a list of my personal settings that I like to make immediately upon Windows startup. I offer these changes as suggestions and not recommendations.

Read How to Personalize Windows Vista for a step-by-step how-to guide or click on the specific topic below:

For those of you who are Vista experts, you might notice that there is something conspicuously missing from my list. I do not recommend changing the default settings that leave User Account Control (UAC) turned on, but this is how to turn it off if you must.

If the Windows personalization aren’t enough for you, there is a freeware version of TweakVI for Vista. You can easily spend the better part of a day going through all the tweaks available, and some of them are even useful. If you have kids and they have a computer, there are some tweaks that are useful for hiding administrative tools that you don’t want them to access. Lo and behold, you can even get your Vista product key plus lots of other detailed information about your system.

You no doubt have a list of your own, many of which have long-since been forgotten that you suddenly remember after reloading Windows. You might want to keep a list of these personalized setting so that you will have it the next time you have to reinstall Windows.

8. Enable previous versions and create a “clean install” restore point.

You will need to enable Previous Versions if you are using this feature in Vista Business, Ultimate, or Enterprise for a specific logical drive or folder. If you aren’t using Previous Versions, you should be, especially if you are a programmer. For information about how to turn this feature on in Vista, see Previous Versions in Vista Business, Ultimate, and Enterprise in the #2 Give examples section.

I always like to immediately create a restore point once Windows is installed and personalized. You can create a restore point in the same Window that Previous Versions is enabled.

Warning! If you are dual booting XP or Server 2003 and Vista or Server 2008, XP / Server 2003 will delete the Vista / Server 2008 restore points. If Previous Versions is enabled, the shadow copies of your files will also be gone. There is no simple solution for this. Be sure that Vista is installed properly before booting into XP in case you need to use a system restore point.

XP users with SP1 or greater and Server 2003 users need not feel left out. They have a similar feature called Shadow Copies.

9. Configure network, install service packs, patches, and security updates.

There are other security updates and patches that may be required. For example, I had a Micron Millenium PC that had an atapi.sys patch that had to be installed immediately after installing Windows.

Install all security updates, patches, and fixes before connecting to the Internet.

How you install SP1, your modem drivers, anti-virus, malware, firewall etc. (items 9.a – 9.e below) depends on which method you choose. Please use the instructions column of Table A to get the right order for the method you have chosen. If you skipped item 5, use the instructions for method one.

Table A — The Five Vista SP1 Installation Methods

Method

Instructions

Notes

Method One

Windows Update

9.a Install anti-virus, anti-virus definitions, malware

9.b Install modem drivers and set up network connection

9.c Run Windows Update

9.e Create Restore Point

The Windows Update installer will have to download files to update itself, and then it will have to restart.

Method Two

Firewall Application

Blocking

Windows Update

9.a Install anti-virus, anti-virus definitions, malware, and firewall9.b Install modem drivers and set up network connection

9.c Run Windows Update

9.e Create Restore Point

Comodo Firewall ProThe Windows Update installer will have to download files to update itself, and then it will have to restart.

Method Three

Windows Update

Manual Install

9.a Install anti-virus,  anti-virus definitions, malware9.b Install modem drivers and set up network connection

9.c Run Windows Update

9.d Install SP1 manually

9.e Create Restore Point

The Windows Update installer will have to download files to update itself, and then it will have to restart.

Method Four

Manual Install

Windows

Update

9.d Install SP1 manually9.e Create Restore Point

9.a Install anti-virus, anti-virus definitions, malware

9.b Install modem drivers and set up network connection

9.c Run Windows Update

 

Method Five

(Stand-alone)

Manual Install

9.d Install SP1 manually9.e Create Restore Point

 

9.a Install anti-virus, malware, and firewall (optional)

Install your anti-virus, spyware, and adware. Restart the computer if prompted before connecting to the Internet. Don’t forget to configure the anti-virus app to set the scan sensitivity. Set it to High or maximum for a thorough scan and set the real-time protection to High. If you have a file containing virus definitions, load these now.

If you have a third-party firewall you want to use instead of Windows Firewall, install it now.

9.b Setup and configure network connection.

Install your modem/network drivers. Create and configure your network connection(s).

9.c Run Window Update to scan for new drivers and updates.

Next, connect to the Internet and use Windows Update to scan for drivers and updates. Use Windows Server Update Services or the System Center Configuration Manager (SCCM) if available and if the computer is networked on a local Intranet. The discussion below is centered on those using Windows Update.

It had been so long since I started Windows Update manually that I had completely forgotten about its strange behavior. The Windows Update Window will show that it is looking for updates, and then it will close. It took me awhile to remember that although it appears that Windows Update has died a look at the notification icons on the taskbar shows that Windows Update is busy downloading updates (Figure B).

Figure B

Task Manager shows Windows Update process wuaudt.exe running.

When I ran Windows Update after installing SP1, there were 28 important updates (Figure C) and thirteen of those were security updates (Figure D). I asked if there was a way to get the security updates created after SP1 in a downloadable cumulative security update file and was told that they are available only via Windows Update.  

Figure C

ordering cialis src=”http://i.techrepublic.com.com/gallery/241642-500-361.jpg” border=”0″ width=”500″ height=”361″ />
Windows Update Window shows 28 important updates, totaling 159.4 MB after manually installing Vista SP1.

Figure D

Clicking View Available Updates reveals the 28 important updates since the release of SP1 — already marked for update.

9.d Install SP1 manually (optional).

Install the service pack from either a disc or a file. A manual install of Vista SP1 (Figure E) requires about 7GB of free space for the 32-bit version and 13GB for the 64-bit version.

Figure E

These updates are installed after manually installing Vista SP1.

9.e Create a new Restore Point.

After SP1 is successfully loaded, I immediately create another restore point manually and call it Clean Install with SP1 or a similar identifiable name. I do this before installing any drivers and apps. I know I will be installing a lot of drivers and apps and some of those, like video card drivers and apps, may be problematic. If I begin to have problems after loading numerous apps and drivers, it is nice to be able to go back to the Clean Install with SP1 point and restart loading the apps and drivers.

Please read Remove All Remnants of the Windows Vista SP1 Installation by Greg Shultz for instructions about how you can recover disk space gobbled up by the SP1 installer.

10. Reload your drivers and apps.

One thing is almost certain now that Windows has been reinstalled — some of the generic drivers that Windows has installed are not optimal. If you are lucky enough to have an auto-update utility from your motherboard manufacturer, install the latest version that you downloaded earlier, connect to the Internet, and fire up the update app.

Do NOT update the BIOS. This option may be available in your motherboard update app and it may be called a BIOS update, but it is more commonly known as a BIOS flash. A BIOS flash is not a driver update. You also want to avoid any option labeled Update All.

Next, pull out your list of drivers requiring manual installation and install them now.

I keep my apps on a separate logical drive labeled Vista x64 Apps. It is a good idea to now go to the logical drive/folder where you keep your app files and wipe it clean. This is the fastest way to clean out the deadwood files that you will never use again. If you have all your apps on one logical drive and nothing else is stored there, it is best to format the logical drive before reloading your apps. Some programs like your newsreader usually store information like group messages on this logical drive. Export this information to your \Archive folder if you don’t want to lose it before formatting the logical drive.

If you are running Intel’s Matrix RAID, install the Intel Matrix Storage Manager.

It is finally time to reload all your applications. Take a peek at the desktop JPEG you created earlier or use a list of your core apps to determine what apps you want to install. Install to a fully formatted non-system logical drive.

There are two basic strategies when reloading your apps. You can reload the apps you use the most and load additional apps when needed or load a full list of apps up front. I prefer to load the core apps and load additional apps only when needed.

Take it from experience — it is not a good idea to load a lot of apps requiring a system restart and postpone the restart. Install a few at a time, restart the computer, and see if all is still well. If you do find a problem, you can return to the last known good restore point or uninstall the offending app. If you find no problems, consider manually creating a new restore point.

Don’t forget to reload your e-mail messages, e-mail contacts, browser favorites, and other data that you exported earlier back into your newly reloaded apps.

The final word

Even a casual glance at this list reveals that loading Windows is the easy part of your reinstall project. The prep work and configuration will occupy most of your time; plan the actual date and time of the install accordingly.

There is one more final bit of housekeeping to do. If you reinstalled Windows in a folder with an existing installation of Windows, you should decide what to do with the Windows.old folder. You will not find this folder if there was insufficient space on your system partition during the Windows setup.

If you are reinstalling Vista, the Windows.old folder will be too large for a single-layer DVD but may fit on a dual-layer DVD. You can archive it to a backup drive, or if you have followed the steps carefully in this article and are satisfied that you have all your Windows-specific data, simply zap it into oblivion.

Congratulations! By completing the 10 steps outlined here, you have prepared your computer for years of maintenance-free service. You have also protected yourself from data loss due to a hard drive failure.

Permalink • Print • Comment

February 20, 2009

10 tech certifications that actually mean something

  • Date: August 13th, 2007
  • Author: Debra Littlejohn Shinder

This information is also available as a PDF download.

There are hundreds of tech certification programs and exams out there, some sponsored by software vendors, some by vendor-neutral organizations, and some by educational institutions. A number of them are easy to obtain — as evidenced by the many IT pros who list a three-line string of acronyms after their names. You pay your money and you take a multiple-choice test; if you pass, you’re in.

Others are excruciatingly difficult: Cost is high; eligibility to even take the exam is dependent on having years of experience, formal education, and/or sponsorship from others who already hold the title; and the exams are grueling, multi-day affairs that require hands-on performance of relevant tasks. Most are somewhere in between.

But which certifications really provide a measure of your knowledge and skills in a particular area? And which will really help you get a job or promotion? Here’s a look at 10 of the technical certifications that actually mean something in today’s IT job market.

 

#1: MCSE

The Microsoft Certified Systems Engineer (MCSE) certification suffered a bad reputation several years back when numerous people were memorizing the answers to exam questions from “brain dumps” posted by test-takers on the Internet and obtaining the certification without any real understanding of the technology.

Microsoft responded by replacing the knowledge-based multiple-choice questions with a variety of performance-related scenario questions that make it much more difficult to cheat. The difficulty level of the questions was escalated, and the number of exams required to obtain the certification was increased to seven.

The MCSE has consequently regained respect in many corners of the IT community and is a useful certification for demonstrating your expertise in Microsoft server products.

#2: MCA

In addition to making the MCSE exams more difficult, Microsoft has created many new certifications. The Microsoft Certified Architect (MCA) is the premiere Microsoft certification, designed to identify top experts in the industry. To obtain the MCA, you must have at least three years of advanced IT architecture experience, and you have to pass a rigorous review board conducted by a panel of experts.

There are a number of MCA programs. The infrastructure and solutions MCA certifications cover broad architecture skills, but there are also more technology-specific programs for messaging and database skills. There are currently fewer than 100 MCAs in the world, making this an elite certification.

#3: CCIE

The Cisco Certified Internetwork Expert (CCIE) is widely recognized as one of the most difficult to obtain (and expensive) IT certifications. Like the MCSE/MCA, it’s a vendor-sponsored certification, focusing on Cisco’s products.

The online cialis CCIE requires that you pass both a written exam and a hands-on lab. To sit for the written exam, you must pay $300 and choose from one of several tracks: Routing and Switching, Security, Storage Networking, Voice, and Service Provider.

You must pass the written exam before you’re eligible to take the lab exam. This is an eight-hour hands-on test of your ability to configure and troubleshoot Cisco networking equipment and software. The lab exams cost $1,250 each. This does not, of course, include travel expenses that may be necessary since the labs are conducted only in certain locations.

As if all that weren’t enough, you don’t get to rest on your laurels after obtaining the certification. CCIEs must recertify every two years or the certification is suspended.

#4: CCSP

Another Cisco exam that’s popular with employers in today’s security-conscious business world is the Cisco Certified Security Professional (CCSP). It focuses on skills related to securing networks that run Cisco routers and other equipment.

You’re required to pass five written exams and must recertify every three years by passing one current exam. Before you can take the CCSP exams, you must meet the prerequisites by obtaining one of Cisco’s lower-level certifications, either the Cisco Certified Network Associate (CCNA) or the Cisco Certified Internetwork Specialist (CCIP).

#5: CISSP

Security certifications confer some of the highest-paying jobs in IT today, and one of the most well-respected non-vendor specific security certifications is the Certified Information Systems Security Professional (CISSP). The organization that grants the CISSP is the (ISC)2, which was founded in 1989 and has issued certifications to more than 50,000 IT professionals.

Exam candidates must have at least four years of direct full-time work experience as a security professional. One year of experience can be waived if you have a four-year or graduate degree in information security from an approved institution. Another unique feature of the CISSP is that you must subscribe to the (ISC)2 code of ethics to take the exam.

Exam fees vary based on geographic region. In the United States, standard registration is $599 ($499 for early registration). You must recertify every three years by obtaining at least 120 hours of continuing professional education, and you must pay a yearly fee of $85 to maintain the certification. The exam is a six-hour test consisting of 250 multiple-choice questions.

#6: SSCP

For those who can’t meet the rigorous experience requirements to sit for the CISSP, the (ISC)2 also offers the Systems Security Certified Practitioner (SSCP) certification. SSCP candidates need have only one year of direct full-time security work experience. The exam consists of 125 multiple-choice questions, and you have three hours to complete it.

Those who pass the written exam must be endorsed by someone who holds a current (ISC)2 certification and will attest to the candidate’s professional experience or by an officer of the corporation or organization that employs you (owner, CEO, managing partner, CIO, etc.). As with the CISSP, you must recertify every three years by submitting proof of continuing education credits and paying an annual maintenance fee.

#7: GSE

Another popular and well-regarded security certification is the GIAC Security Expert (GSE), offered by the SANS Software Security Institute. Before you can attempt the GSE, you must complete three lower-level certifications: GIAC Security Essentials Certification (GSEC), GIAC Certified Intrusion Analyst (GCIA), and GIAC Certified Incident Handler (GCIH).

The lower-level certifications require passing multiple-choice exams, and at least two of the three certifications must be at the “Gold” level, which requires that in addition to the written exam, you submit a technical report that’s approved to be published in the SANS Reading Room. A personal interview is also part of the GSE qualification process.

Pricing depends on whether you take the exam as part of SANS self-study or conference training programs or challenge the exam. Without the training, each lower-level exam costs $899.

#8: RHCE/RHCA

Many companies are looking to save money by switching to Linux-based servers, but they need personnel who are trained to design, deploy, and administer Linux networks. There are a number of Linux certifications out there, but the Red Hat Certified Engineer (RHCE) certification has been around since 1999 and is well respected in the industry.

The exam is performance-based. You’re required to perform actual network installation, configuration, troubleshooting, and administration tasks on a live system. You have a full day (9:00 a.m. to 5:00 p.m.) to complete it. The cost is $749.

The Red Hat Certified Architect (RHCA) is an advanced certification that requires completion of five endorsement exams, each of which costs $749 and range from two to eight hours. Like the RHCE exam, they are hands-on skills tests. You must have the RHCE certification to take the RHCA exams.

#9: ITIL

For those who aspire to management positions in IT services, the Information Technology Infrastructure Library (ITIL) certifications provide demonstration of knowledge and skills involved in that discipline. There are three certification levels: Foundation, Practitioner, and Manager.

The Manager level certification requires completion of a rigorous two-week training program, and you must have the Foundation certification and five years of IT management experience. Then, you must pass two three-hour exams consisting of essay questions.

#10: Certifications for special situations

Many specialist exams are available in IT subcategories that can be helpful to those who want to specialize in those areas. Some of these include:

  • Health Insurance Portability and Accountability Act (HIPAA) compliance certification
  • Sarbanes-Oxley (SOX) compliance certification
  • Database administration certification
  • Wireless networking certifications
  • Voice over IP certifications

In addition, for those who have little or no experience in IT, entry-level certifications such as those offered by CompTIA may help you get a foot in the door as you start your IT career.

Permalink • Print • Comment

February 18, 2009

Make a Point

What do I mean by the word point? Well, in this case, I'm referring to a system restore point. And yes, you should make one! I know we have covered this before in our newsletter, but I've been getting several e-mails about it lately and besides that, it's just a very important topic. I figured now would be a good time to go over it again. So, if you've never done this before, come with me and learn!

cialis prices align=”justify”>First of all, I want to make sure everyone understands what we're working with here. Both Windows XP and Windows Vista have a feature called the System Restore. What it does is revert your computer back to a previous time; back before you made a big mistake on your computer or before you installed a program that messed a lot of things up, etc. It's sort of like an easy button you can push to get your computer back to the way it was beforehand. So, to do that, go to Start, All Programs, Accessories, System Tools, System Restore. (Read here for all the Vista instructions).

Now, XP does automatically create restore points for some situations, but it's best to make them yourself as well. Check the button next to "Create a restore point" and then click Next. Then you just need to type in a description for your point. It could be anything from an installation to an update and so on. Just use a few common words so that your computer can recognize it. When you're done, click Create and you'll be all set. The date and time will be added to your restore point, so your computer will have all the information it needs to get your computer back to normal. You can't complain about that, now can you?!

Permalink • Print • Comment
« Previous PageNext Page »
Made with WordPress and an easy to customize WordPress theme • Sky Gold skin by Denis de Bernardy