Showing posts with label Microsoft. Show all posts
Showing posts with label Microsoft. Show all posts

Tuesday, January 17, 2017

More windows 10 FUD


Source: ZDNet

"Windows 7 "does not meet the requirements of modern technology, nor the high security requirements of IT departments", said Markus Nitschke, head of Windows at Microsoft Germany."

You'd think ol' Satjay would have gotten the message with the backlash over the forced upgrade of millions of PC's across the globe with Windows 10's tricky dialog box.

Apparently not...

Today we find the latest salvo against poor old Windows 7 by the proclamation that somehow enterprises are at a serious risk in continuing with Windows 7 ONE MINUTE LONGER!

Please.  The laughable assumption that Windows 10 is the cure for all the ills that plague the enterprise is getting a bit tired.

Consider that even with the recent walkbacks of draconian control of the Windows 10 desktop from IT departments the fact remains that security is not a question of what OS you run.  It's a matter of how good your security policies are and as I've said before the way we treat security will always fail so long as the end user is treated as an adversary.

What about productivity?  What about freedom from nagging popup ads for Office 365 or Cortana getting in the way of a simple search for a hidden app in your start menu?  What about compatibility with current software and most importantly HARDWARE!

If you're an enterprise with a fleet of Kaby Lake desktops maybe Windows 10 is a better fit for you but it's going to have virtually NOTHING to do with how secure your enterprise is.

That takes a good security policy with end-user buy-in or it will fail.



If security was such a concern then Microsoft should have started producing a Linux Distro instead of another flaky, cruft laden OS.  It would have been cheaper and a hell of a lot easier to patch.

If Microsoft still thinks that as they go so goes the world then we'd all be running Linux with a Microsoft logo.  

But that won't happen because everybody knows that paid Linux distributions that nickel and dime you for every app and feature always fail regardless of how good they are.

If this news concerns you, let me provide some salve that's more relevant.  

Security isn't about an OS, it's about your security practices.  Good practice can keep even Windows XP secure in the enterprise...

I've seen it in practice and it has A LOT to do with what you ALLOW in the enterprise.  

Look, you can drive the safest car in the world but if you're determined to drive off a cliff to your death there's nothing that's going to stop that.

Remember where this is coming from.  A company that wants to SELL you an Operating System so that it can SELL you more of it's products.

That's reality.

Monday, August 8, 2016

Windows 10 Anniversary update: Your Last Chance Microsoft!


There are those in my profession that would call me unprofessional.  Others might even go so far as to say I'm just a disgruntled crank festooned with the requisite tin-foil hat when it comes to Microsoft Windows 10.

Here's the thing....

I don't care what you think.  I know what I've experienced and having spent most of my working career in the field losing countless hours to the cavalcade of flaws that is a new Microsoft OS I say with confidence...

Windows 10 is not an operating system, it's a delivery mechanism predicated on a marketing strategy.

I look at Windows 10 the same way I look at car commercials.  It's full of glitz, glamour and endless marketing campaigns with the sole intent of dangling shiny objects to distract you from it's intrusive and unreliable nature.

So yes, I've used it almost exclusively for a year, accepted the endless updates, 20 minute shutdown times and random lockups.  All with the intention of giving the OS a fair shake and hey the price was right.

In the intervening year between update 1607 and the launch of Windows 10 I've used the OS enough to find virtually no compelling reason to recommend it over Windows 7 for anything but support for the OS beyond 2020.

That Microsoft is now charging a minimum of $119 for the OS is an affront considering how much of a marketing platform Windows 10 is.

There are elements in Windows 10 that depending on the version are absolutely detrimental to an enterprise environment.  For example, in older versions of Windows you could get away with using a "Pro" version of Windows in your enterprise.  Yes, there were stripped down "Enterprise" versions only available to those with a Microsoft Licensing agreement but they were few and far between in my own experience.

A PRO version could connect to a Windows domain and allowed just as much control over the user experience.  The only caveat being a bit more overhead cruft inherited from its "consumer" roots.

Today a PRO version is much the same but unlike previous versions is subject to the "consumer" OS experience.   Meaning Microsoft and not your IT department is largely in control of the desktop experience in your enterprise.

Enterprise gives you all the control you used to have with "just" a PRO version but now you have to pay a subscription fee for that privilege.

I don't like that and I've taken active measures against that strategy including using SpyBot Anti-Beacon, refusing to connect my Microsoft account to the OS and denying the allure of the Microsoft Store.

Have you noticed that I've yet to say anything compelling about Windows 10?  That's because it's not and simply put there isn't anything compelling unless you work for Microsoft's marketing department.

Windows 10 is "probably" a better OS than its predecessors but you'll likely never see the benefit for all the cruft piled on top of it.  That's where the promise of the "Enterprise" versions come in but even they have been stained by the tarnish of a consumer OS.

So with the Anniversary update this is my last stand with Windows 10.  I expect many of my issues to be addressed or I'm jumping off the boat.  I could care less about "features" if they get in the way of what I'm trying to get done.

With that in mind I've documented my latest Windows 10 experience.  That being the installation and review of Windows 10 Anniversary update 1607.

I invite you to enjoy in 20 or so minutes what took me 2 1/2 hours.




Wednesday, July 20, 2016

Yammer's back. Microsoft updates the de facto social media client for the Enterprise


If you work in a company of any size chances are Microsoft technologies are the backbone of IT which means there's probably an Office 365 enterprise subscription.

Far removed from it's humble roots as a standalone productivity suite with Outlook's public folders as your primary collaboration source we now enjoy collaboration features that we'd never dreamed of back in the old days.

It really started with OneNote, then came SharePoint to extend the fun to other people and with acquisitions like Skype and Yammer, collaboration is almost a given in the modern enterprise.

But some features worked better than others and Microsoft has a bad habit of changing things without notice or letting features die on the vine.

For awhile it seemed like Yammer was going to be one of those withering features until recently. 
In case you didn't know...

Yammer is a private social networking service that allows communication and collaboration between users in the same enterprise.  Before the Microsoft acquisition access was limited to those within the same email domain.  Microsoft tightened that up by using AD membership but there was still work to do in the 2 years since it became part of Office 365.

Today a major update was announced that allows even tighter integration on windows domains as well as new collaboration features and on the admin end the ability to merge yammer user domains.  A handy feature with all those mergers and acquisitions going on in the corporate world. 

The video below comes from Microsoft and does a better job of explaining the updates to the service than I could.  

It's worth a look...



Wednesday, June 15, 2016

Microsoft Buys LinkedIn...Another shot in the foot


If you've spent any time looking for greener professional pastures in the past few years your path has undoubtedly crossed with LinkedIn.

Touted as "The Facebook for business" the social networking site promised the same kind of experience in the professional world.  Career consultants and HR types lauded it as an invaluable resource for connecting with the hiring movers and shakers in industry.  It was supposed to be the missing link between casting your resume into the void of Monster.com and a lunch date with your potential boss.

Which it was.  That is, so long as you actually knew someone.  

Just like any other social network its usefulness is limited by the people you actually know.  The sad reality is you're more likely to run into people you never want to see again than anyone that could give you a leg up.

Worse, over the years LinkedIn has become infected with the same resume-stacking, quota chasing,  recruiter types on the job boards that send you emails like this...

"Hi Everyone,
We have Informatica Architect available @ Charlotte, NC area. He is looking opportunities only @ NC, TX and GA areas. If anyone is having requirements in that areas. Kindly share me the job details along with the client information. We are marketing around $75-80/hr c2c.
Thanks for your time…

Thanks,

Spammy D Recruiter
Ph: 555- 555- 0412 
Email: spammy@spammyrecruiter.com"

Yeah, UMMM, I'm actually looking for work not hiring and that other thing....I live in Arizona....

So what does this have to do with Microsoft?  Are they looking to take on ZipRecruiter?

Unlikely....

It's just the latest reach into the dream of ubiquity dearly held by Microsoft CEO's.  They already have a hand in Facebook, Android and gaming.  They've owned the office for years and this latest purchase is proof of their intention to keep it.

The most likely outcome from the $26.2 billion dollar deal is to absorb the analytics capabilities of the LinkedIn platform and place yet another useless live-tile flashing in the Windows 10 start menu.

So how has all this buying paid off for Microsoft?

A look at their buying habits reveals that they're better at acquiring stocks than companies.

Let's compare and contrast....



Microsoft makes $34 billion off Android Patents, writes off $9 Billion for the Nokia Acquisition.

Microsoft invests $150 million in Apple  ultimately saving the company and enjoying a tidy profit when the stock splits and they sell it a few years later.  Oh yeah, and they have a guaranteed space on a competitors platform for Office.

Microsoft buys Skype for $8.5 Billion and turns an innovative, lightweight VOIP solution into a bloated mess with a paywall making it among the most hated services in its portfolio.  

Next, they kill off the beloved Windows Messenger after buying Yammer for $1.2 billion.  Once positioned as Messenger's hipster "Facebook-esque"replacement it was never heard from again outside of an Office 365 subscription. 

It seems Microsoft's acquisition strategy is to buy up companies that are just past their heyday, gut them then take a write-down later.  Kind of like when IBM purchased ROLM and  Lotus.

LinkedIn is no different.  It's only useful to those HR types that have to meet a contact quota every week and enjoy self-congratulating articles about what a good job the industry has done commoditizing job seekers like so much cattle at an auction.

Mark my words, this isn't a good thing for Microsoft.  At least no more than Nokia was going to win them market share in the mobile space or Skype was going to supplant Cisco's VOIP offerings.

But all is not lost!  Take heart friends because every time Microsoft screws up another tech company the resulting void proves to be a boon for the open source community.

Which is almost as bad but at least you're free of Microsoft's incessant sales campaigns and licensing boondoggles. 

I got off LinkedIn a couple of months ago precisely because the service did nothing for me but fill my inbox with spam.  It's a service in decline which made it a ripe target for Microsoft. 

Meaning a change in ownership, especially when its Microsoft, won't make it any more attractive.

I'm just not interested in turning my next job search into another Microsoft marketing opportunity...





Wednesday, May 25, 2016

What makes Windows 10 so bad?


Windows 10 is both the most advanced and most controversial operating system ever released.  Its focus on unifying the Windows experience across a myriad of devices is laudable but the premise of its launch is suspect.

While proponents and shills of Microsoft's latest SALES platform treat such observations as the ravings of the tin foil hat crowd, a cooler head finds legitimate issues with Satya Nadella's strategy for the platform.  

Ask yourself the following questions....

Can anyone trust an operating system that constantly monitors your habits for no other purpose than to sell you something?

Is it OK to force an operating system upgrade that you don't want? 

Let me show you why I can't take Windows 10 seriously in the video below...




Thursday, July 30, 2015

Windows 10 alternative installation


So if you're like me and prefer to pick your own time to take the Windows 10 plunge then you're probably going to need some help when you finally push the go button.

That's because unlike most who'll take advantage of the free upgrade, disabling the automatic upgrade process requires a little more effort but no more than installing any other OS. It's still an upgrade so you still get to keep all your old apps ( so long as they're compatible.)

I haven't changed my position and the tight integration with Microsoft's ecosystem is ever present in Windows 10 but you can get around it.  In fact I'll be doing a series of videos in the near future on just how to minimize the amount of information you share.  

Microsoft may be taking a page from Apple's book with this latest version of the "one Windows to rule them all" mantra but for now it's more of an inconvenience than an Apple-like mandate.  

The reality of tech in the 21st century is that the more convenience you demand the more of your life you'll be asked to expose.  With Windows 10 it's still mostly your choice of how wide to open the Kimono but you need to know what you're buying into.  

For the most part, Windows users have gotten off easy with privacy but with an OS that's more connected than any previous version, it's high time we stop taking privacy for granted.  Look, if it's got a chip in it  somebody can hack it.  That's just the world we live in.  So make sure to clean up your act before upgrading to Windows 10.

That said, you may need some help when you finally do the upgrade.  That's what the series of videos below will show you.  I'll walk you through creating media for a manual install then using it to upgrade a Windows 7 Ultimate PC.

Check them out.  You'll find them a bit irreverent but likely similar to your own experience when you do upgrade.  


Saturday, July 18, 2015

Windws 10 is almost here, Know what you're getting



No long form posts this time just a bit of reality.

The wider web is just waking up to the fact that with the impending launch of Windows 10 things are going to be a bit different.

The most obvious, of course, is that for most people the "upgrade" will be free unless you happen to be an enterprise customer.

What IT pros have known for a couple of months now is that Microsoft's definition of "Free" as it pertains to Windows 10 is less like "Free Beer" and more like "Free vacation" as in those awful timeshare sales pitch weekends.

As an IT pro I'll tolerate a lot of things if nobody's in my wallet but I'm always mindful that somewhere down the line there will be a price exacted.

And so it is with Windows 10...

I'll cut to the quick.  The most important thing to know about Windows 10 is that it's more than a better Windows 8.  It's the cornerstone of a sales platform which is why they can afford to give it away.

Which is also why things like mandatory updates are in your future.  Like it or not if Microsoft wants to change something you have nothing to say about it. 

That's problematic because the Redmond guys don't have the greatest track record with updates.  Any IT pro can probably think of at least half a dozen that ruined their day.

It's also wise to be suspicious of motives when a company hides its true intentions in seemingly innocuous descriptions like " an update to the update. "  (KB3035583)

As such you'd be well advised to treat the new OS like one of those Internet Kiosks you used to find in the airports.  In short, it's an access point but it's not personal. 

So what does all of this really mean? 

Windows 10 is the first real version of Windows to enforce a EULA that's been around since Windows 3.1.  I.E. Wake up kiddies, you don't own the software and for whatever ills Windows 10 may cure you're essentially granting them root access. 

There are changes under the hood that go beyond a fresh interface to include updates, licensing and authentication. Things you may not see but nonetheless should be aware of.

It's simple, Microsoft is interested in building a tightly walled garden much like Apple but without the huge investments in hardware. 

It makes sense.  Why reinvent the wheel when there's so many willing and eager to do it for you?

If you're ok passing everything through Microsoft's sanity filter then this probably isn't a problem for you and 90% of users will gladly give up a little more control for a free copy of a "Windows" OS.

However, If you're at all interested in security and privacy then I'd start interviewing Linux distros and secure offline storage.  I'd also be wary of any project that embraces MS recent change of heart about open source. 

Nothing's free and to be fair they have a right to control their OS but you have a right to be in exclusive control of your data.

I know, it sounds like we're venturing into the realm of conspiracy theory but stop for a moment and think about just how much of your life lies within those bits. 

Of course if you have nothing to hide then you don't have a problem right?


Yes, yes we do...

Monday, June 22, 2015

Windows 10: Nag Be Gone! Here's how...



So, are you tired of being nagged about Windows 10 yet?

Yeah, I want it too but I don't need to be nagged about it for the next year so here's a quick video on how to get rid of that annoying little icon in your taskbar.

Note that in this case even after uninstalling KB3035583 the nag screen directory (system32\GWX) remained and this is where we come into our story...

Check out the video...


Thursday, May 21, 2015

Windows 10, A Mandatory update?



So if you're reading this there's a good chance you've already read my rant about Microsoft's clandestine little plan to shove Windows 10 down your throat whether you want it or not. 

It came in the form of an "Important" patch (KB3035583) with a fairly innocuous description that gives no indication of its true intent.

"Update enables additional capabilities for Windows Update notifications..."

Now some of you out there think I'm making much ado about nothing.  I'm told, " People want it, it's no big deal. "

Hey, I want it too but when I get a patch that that tries to automatically install itself and gives no indication as to its true intent, I get suspicious.

Maybe I've just been around this business too long but if there's anything I've learned in 20+ years of being a server jockey it's that you never take anything Microsoft says on face value.

It's a company that's built their business on ambiguity and misdirection.



I've said for years that Microsoft wants your toaster and with Windows 10 they may finally get it. 

That's fine, so long as you know what you're buying into and right now we most undeniably don't.

Which is why I have a new rant directed simultaneously at Microsoft and a certain Windows podcast produced Weekly on a network named after a gentrified term for a moron (TWIT).

This week said podcast (Windows Weekly) was primarily focused on the impending release of Windows 10.  In it we found that Microsoft had for the most part reiterated the obvious and essentially told us nothing new.

Except...

We found out that whether you're a business customer or a lowly consumer, Windows 10 was going to update itself whether you liked it or not.

With Windows 10 Microsoft seeks to put the days of a la' carte updates behind them.  Meaning if Microsoft wants to force a nag screen onto your desktop to promote the latest version of Office or Skype, you are, in the words of Mary Jo Foley, "Going to take it and like it.

Now I've noticed that Skype keeps showing up as an "Important" update over the past 3 months on all my Windows 7 machines. 

Thing is, I only use Skype on one of them and then it's very sparingly.  I don't like Skype, I don't like its constant nagging and I sure as hell don't like Microsoft goading me into installing it when I don't want it!

With Microsoft's new update directives, however, Skype would be considered a new "feature."

That goes for enterprise customers too by the way.  It's just like it sounds guys.  Microsoft has seen fit to take the burden of desktop management off your hands.  I wonder if they'll take the support calls too...

You enterprise guys do get some reprieve, however.  You can choose to "delay" updates for short period of time but if you don't allow those "feature updates" to deploy you run the risk of losing security updates for your entire business.

In their grand plan, to paraphrase Mary Jo Foley, Microsoft is seeking to eliminate third party desktop management and essentially control the desktop build regardless of the needs of your enterprise.

Like Manage Engine instead of System Management Server?  Too bad, it's all or nothing baby...

If you're not quite an "Enterprise" customer then Microsoft lumps you in with all those other "consumers"  Meaning you don't get the option to delay your updates.  No a la' carte either.

It also means that if Microsoft happens to roll out an update that blue screens half the Windows PC's on the planet you have no recourse. 

I'm thinking there's going to be a whole lot of business continuation insurance policies sold in the next year.

Am I blowing things out of proportion?  I don't think so for two reasons. 

    1. It's happened before.  Actually it's a fairly regular occurrence but the smart IT pro knows better than to just blindly allow updates to install without at least reviewing the descriptions.  That option disappears for consumer versions of Windows 10 (and largely for Enterprise as well)                                                            
    2. This could be disastrous for small businesses who rely on applications that may not be 100% compatible with a given update.  I don't want to hear about how stupid people keep using old software either.  It's not always their choice and it shouldn't be Microsoft's either.


Mary Jo Foley attempted to explain the new update strategy by claiming that some security updates could be dependent on other non-security updates.  Potentially causing issues if the current update model was allowed to continue.

This is where my rant about Windows Weekly starts...

By what stretch of the imagination should a SECURITY  update ever be tied to a FEATURE update?  By their very nature security updates are meant to address an existing security vulnerability not support new features or deal with compatibility issues. 

That's why even Microsoft classifies them.   You see, it's done that way because all those silly IT managers have this bad habit of wanting to know what the hell an update is going to do to their user base BEFORE it gets deployed. 

It's an example of Microsoft marketing speak.  It comes from the same people who describe an update that adds a  nag screen and background downloader as "additional update capabilities."

I have to wonder what color the sky is in a tech journalist's world...

It is this fundamental disconnect with the way that IT works that's put me at odds with tech journalists like Paul Thurrott (who still thinks Windows Vista was ok) and Mary Jo Foley.

For god's sake, the woman covers enterprise computing!  Is she just reading the sales brochures??  How could she not understand that taking away control of update deployments from IT departments is a VERY real problem.

Look, I get it.

Until recently, Thurrott and Foley were on the outs with Microsoft.  A condition that only recently changed around the time of Satjay Nadella taking the helm.

Since then I've noticed a far less critical point of view on Windows Weekly.  It's understandable if they don't want to jeopardize their newfound access but really now.

If you can't be objective then don't cover the topic.  That's what good journalists do.  Further, I don't want to hear anybody's ruminations on how enterprise IT works who's never had to do it for a living.  Report what you find but keep your admonitions to yourself.

Don't get me wrong, I believe Windows 10 will be a better Windows OS but to ignore the price it's going to exact is just naive. 

Ignore me if you want, just don't come crying if Microsoft decides that your 5000 seat enterprise should be using Lync for all its messaging some sad Monday morning.

Eyes open kids...


Tuesday, May 19, 2015

KB3035583 and Windows 10, why you shouldn't install it


No, No, No a thousand times NO!

They're at it again...

In case you didn't notice, an "Important" patch (KB3035583) showed up today or should I say showed up again.  Originally hidden in a batch of updates last April, Microsoft was planning on installing "nag screens" on every copy of Windows from version 7 and above to promote the upcoming release of Windows 10.  Nag screens are bad enough but some clever engineer discovered there was more than just the suggestion to upgrade.   

Of course the description of KB3035583 is dripping with ambiguity meaning most people will just blithely install this latest "important" update without a thought.  

That's a bad thing...

The patch includes not only a series of marketing nag screens but code to install Windows 10 as well.  That's a problem due to the fact that by default many Windows PC's are set to automatically install updates deemed "important" of which KB3035583 is one.  Reportedly, Windows 10 will be distributed similar to the 2014 Windows 8.1 update meaning unless you turn off automatic updates, the upgrade could begin without your knowledge.

But this is all just supposition right? Surely nothing can go wrong with a description like...

" This update enables additional capabilities for Windows Update notifications when new updates are available to the user..."

It's wise practice to question what Microsoft deems "important" and what exactly is meant by "additional capabilities"  especially when those capabilities have the potential to become a pain in the posterior.

Which is why I'm disappointed.  I had hoped that the "New" Microsoft under Nadella would have done away with Ballmer era subterfuge.  Surely the days of clandestine updates that killed off email attachments and upgrade nag screens were over or so I thought.

This latest update lays the foundation for the upcoming Windows 10 rollout.  Yes this latest and reportedly last version of Windows may finally cure the evils of its predecessor but there are still far more questions than answers. 

Questions like, is Windows 10 really free or am I going to get a bill for it in a year.  If I don't want to upgrade immediately what will the "retail" versions cost?  Worse, what happens if I have to reinstall the operating system when it inevitably blows up after the "free" period expires.

For now I suggest that you hide this update.  It's not Microsoft's decision whether or not you upgrade to Windows 10 and you sure as hell don't need to conform to their timeline.


For the next few months keep a close eye on those "Important" Windows updates and if KB3035583 is already installed, remove it.

Thursday, April 2, 2015

Ghosts in the Malwarebytes



Just a quick note.  If you've just suffered a debilitating round of re-installing Office 2003 today ( C'mon now, at least a few of you still have to support it) I may know why.

At roughly 2PM PST on April 2nd 2015,  Malwarebytes released an update (4.2.6) for it's malware scanner  that falsely triggered a quarantine of Microsoft Office 2003 files for a supposed "Trojan.Agent.edt" infection.  The first victim is usually outlook.dll since it's part of Outlook client and the most used application of the suite.  

While the Fortune 500 IT guys may have nothing to worry about here, the rest of us just might.  In the "real" world to find an old version of outlook (like 2003) to be running alongside a newer version of the MS Office suite isn't uncommon.   More often than not small businesses opted to upgrade to a version of MS Office that didn't include Outlook.

That there were more versions of MS Office without it than with was either bad marketing or just a cruel joke.  Regardless, it means you as a small business IT guy or consultant can run into this issue.  

So here are those ingredients for pain again...

You need one part Microsoft Office 2003, one part Malwarebytes and one part bad update.

The fix?

Depending on whether or not the affected system had Office running today the fix is as simple as allowing the latest updates to install (4.3.x).

If, however, you received a feverish phone call toady from users convinced they were experiencing a "Virus!" there's an extra step.

The "infected" office files will be in the quarantine (under the History tab) of the Malwarebytes application.  Select their associated check boxes and simply click "Restore" and answer in the affirmative to any questioning prompt.

You should update the Malwarebytes signature files first, BTW, so that you don't end up in chasing your tail in an endless circle of restoration/quarantine.

The quarantine process removes but does not damage files so their restoration requires no further action to return your MS Office 2003 applications to full functionality.

Follow the steps above and you can consider this bullet dodged.


Check out the video below to see the steps in action!


Thursday, December 4, 2014

Windows 10 on ESX with all the uglies...




I've just completed the first in what I hope to be a short series of videos in the vein of the Windows 8 videos I did a few years ago.  This one is about installing and configuring Windows 10 on an ESX 5.5 virtual host.

Come along and see what it's like with all the uglies left in!  I don't know about you but I hate tutorials that never tell me what to do when something bad happens!

Without further adieu I give you Windows 10 on ESX!



Wednesday, August 20, 2014

Microsoft's Bloody Tuesday

Originally published on Kupeesh as Fear and Loathing of a Microsoft Patch



Poor Microsoft, it's been a tough couple of years for the software giant as it's gone through management upheavals, a failed operating system and a lackluster foray into the mobile market.

It seems they just can't catch a break...

That doesn't preclude them, however, from breaking things.

Case in point.  Last week's round of "Patch Tuesday" updates was filled to the brim with security and operating system fixes that millions of Windows PC's dutifully installed via automatic updates.

Normally keeping an operating system up to date is a good idea if you want to keep the bad guys out of your stuff.  But what do you do when the supposed good guys blow up your computer?

That's a question thousands of Windows users are asking as they now find themselves between the rock of Internet security threats and the hard place of a botched update.  

Even longtime Microsoft watchers like Paul Thurott (Windows Weekly, Winsupersite) can only answer with, "That's a tough one."

The patch causing so much trouble is a seemingly innocuous update to the Russian Ruble currency symbol in the windows font library (KB 2970228).  Apparently some users are experiencing everything from screwed up fonts to Blue Screens of Death (BSOD) after its installation.  As a workaround Microsoft is currently advising users to remove it and 3 other updates (KB2982791,KB2975719,KB2975331) that contain the offending code.  In addition, the download description pages for the affected update patches have had their download links removed while Microsoft, "investigates the issue."

Windows 7 and 8 are arguably the most robust operating systems Microsoft has ever produced.  So the return of the BSOD nemesis from the days of Windows XP is going to raise some eyebrows.  BSOD's only arise when a core operating system function has failed beyond recovery.  

That's something we thought we left behind when the house of cards that was Windows XP finally shuffled off the stage.  So with so much progress, how could Microsoft allow an obviously unvetted update to be distributed on platforms from Server 2003 to Windows 8.1.

Yes I know, Microsoft, unlike Apple, doesn't control every variant of hardware that runs their software.  But it's for exactly that reason that one would think their update policy would err on the side of caution.  That goes double in a week that also saw major outages of the company's Azure cloud services.

Instead Microsoft seems bent on releasing new products (patches included) like automakers release new cars.  But operating systems aren't Chevy's and rushing new products to market always leaves something to be desired.  Just ask GM about taking shortcuts in a process for proof.

So what's the answer when a strategy of "rapid release" seems to rule the day.  Unfortunately it's "Caveat Emptor," Buyer Beware.  Microsoft appears committed to shooting out software patches and asking questions later.  So for now, you may just want to switch those automatic updates to "manual" and wait a week after Patch Tuesday to install those non-critical updates.


In this case the cure was worse than the disease.

Saturday, February 1, 2014

CLI-nging ON



Imagine if you had to do the following  just to start your car every morning...

1.    Pull the choke adjacent to the right fender while engaging the crank lever under the radiator at the front of the car, slowly turning it a quarter-turn clockwise to prime the carburetor with fuel.
2.     Get into the car. Insert the ignition key, turning the setting to either magneto or battery. Adjust the timing stalk upward to retard the timing, move the throttle stalk downward slightly for an idle setting, and pull back on the hand brake, which also places the car in neutral.
3.     Return to the front of the car. Use your left hand to crank the lever (if the engine backfires and the lever swings counterclockwise, the left arm is less likely to be broken). Give it a vigorous half-crank, and the engine should start.

Chances are, your great grandparents were very familiar with the procedure if they owned a Model T.  Mind you, all that bother just starts the car, you haven't even tried to drive anywhere yet.  A complicated procedure to be sure but it beat shoe leather, barely.

Times changed and eventually somebody figured out how to take all those manual processes and mechanically automate them.  Soon, starting your car was just a turn of a key and driving it was more about where you wanted to go than how to control a mass of cantankerous machinery.  It also made the act of driving more accessible to more people.

That's called progress....

So as I stare at my open PowerShell window with a line of gobbledygook that to my dismay is my only means of finding out how much space my email users are hogging I have to wonder...

[PS] C:\>Get-MailboxDatabase "Mailbox Database 1" | Get-MailboxStatistics | Sort totalitemsize -desc | Export-CSV C:\mailboxes.csv

What's up with this command line stuff? 

Go into just about any forum or social media discussion even remotely related to IT and the flame wars will start with the mere mention of the command line.

"Go play with Windows if you want to click buttons"

countered with...

"You know, nobody uses punch cards anymore"

On and on ad infinitum. 

I had just such an exchange the other day with an open source devotee.  He was one of those grizzled admin types who clings to the mantra that nothing real happens in IT without a CLI (Command Line Interface)
He went on and on about his numerous accomplishments with his mastery of cursor and alphabet.  He also bemoaned the lack of functionality in all those "buttons."

It brought me back to the story a friend told me of an old CPA who refused to use a computer with Windows on it because all those kinds of OS's were just "Game" machines.

Anyway, apparently support for his favorite open source R&D project was callously left out of the latest VMWARE Vsphere client.  There was no doubt that to him such an omission doomed VMWare's GUI.

I was quick to point out that the Vshpere client is the preferred method (or the Web client for 5.5) to manage VMWare.  Actually, it's one of the more complete GUI management interfaces available and there aren't a lot of "buttons" to it.

He didn't think so...

To my mind, if it isn't officially supported then you take your lumps and have no right to complain.  But it's pointless to argue with someone like that.  As far as I was concerned he could just go back to his cave...

So it should be no surprise that I hate the command line but only because it's frequently a requirement instead of an option and to me that's all kinds of wrong.  A throwback to carrying around a crank to start your car and the Charleston.

But I have to admit that my console loving friend does have a point.  Far too often Graphical User Interfaces (GUIs) let us down.  They only contain the bare minimum of functionality often forcing you to stare into the inky blackness of a console.

 After 30 years of interface development why is it that CLI's are still so prevalent even in operating systems called "Windows?"  Why, for instance, do I have to execute scripts to select multiples of anything instead of just selecting what I want as a group and clicking "OK"

What my troglodytic friend doesn't seem to understand with all his mastery of the blinking cursor is that he's being forced to do more work than he needs to.  System Administration is frequently bogged down by syntax.  I shouldn't need to be a closet code monkey just to efficiently manage an enterprise.

Microsoft, the entity that made the whole concept of a GUI interface acceptable to most of the corporate world seems to be at odds with its own history. (BTW, Yes I know MAC was first with GUI's)

With every new version of windows it seems simple functions are being relegated to scripts and command lines.  Only the most rudimentary controls are left behind.  Spend any time managing Windows Server 2008 or 2012 and it starts to feel like you've entered some twisted Twilight Zone version of Linux.

I'm not saying the command line should be abolished.  Just like you occasionally need to roll up your sleeves and get a little dirty to get your car started in the morning; there's times you need to drop to that nasty old CLI.

That's ok, I have a right to get a little dirty if I need to BUT it shouldn't be a requirement.  That's my problem with the CLI. 

There's an assumption among the CLI elitists that if you're not comfortable with the command line then you must not know what you're doing.

I can assure you, I know exactly what I'm doing.  I'd just rather do it than get bogged down in a layer of abstraction to get to it. 

Yes, I said it, the CLI is an abstraction almost to the point of a DIStraction.  Even more so than a GUI, the convoluted syntax and cryptic commands do more to separate you from the task at hand than any click ever could.

Is your DNS server more secure and better optimized than mine because you configured it with your arsenal of scripts?  Or is it really an indication of a lazy GUI development team that's given you inadequate tools.

Microsoft introduced the concept of a modular GUI interface called the MMC (Microsoft Management Console) back in the NT 4 days.  It was designed to be customizable and more flexible than the standalone applets that accompanied every service.  It was a step in the right direction but unfortunately began the trend of minimizing GUI functionality by neutering the available commands within the MMC applets.

I submit that both the GUI and CLI devotees are right.  I should never have to go to a command line or call up a script to perform management functions.  I should, however, have a robust CLI that doesn't require me to understand the intricacies of of the Microsoft Foundation Classes.  Interfaces should be complete or at least offer the option to be that way regardless of their presentation.. 

What's wrong about the CLI guys is all the arrogance.  So what if you can dash out 30 line scripts from memory or poke holes through VMWARE to support the latest R&D cloud project. 

Don't assume that because I choose not to waste my time on hand cranked cars to get where I'm going that I don't know how to get there. 

I just expect...no...I demand better and at this stage in the game it's just developer laziness that I don't have it.