Or, Why most "Unquoted Service Paths" findings are unnecessarily alarmist In late 2012, the issue of improper quoting in the configuration of paths to service executables seemed to begin getting attention again, possibly due to this article . Or perhaps...

Aaron Margosis interviewed on Channel 9's Taste of Premier about Security Guidance for Windows 8.1, Windows Server 2012 R2 and IE 11: http://channel9.msdn.com/Blogs/Taste-of-Premier/Taste-of-Premier-Security-Guidance-for-Windows-8-1-Windows-Server...

Adapted from the forthcoming book, Troubleshooting with the Windows® Sysinternals Tools , by Mark E. Russinovich and Aaron Margosis. A customer had nearly a dozen software packages that wouldn’t install on Windows 7 x64. Every installation...

Microsoft has published its security guidance and baselines for Windows 8.1, Windows Server 2012 R2 and Internet Explorer 11. If you have been reluctant to evaluate or deploy these technologies in the absence of specific USGCB guidance, NIST essentially...

Sorry for the late notice, but I just saw this: Sysinternals Primer: TechEd 2014 Edition will be airing live on Channel 9 starting at 5pm Central Daylight Time today . (That's in just over 4 hours from now as I write this.) Not sure about the link...

I'll be presenting " TWC: Sysinternals Primer: TechEd 2014 Edition " in Houston, Tuesday, May 13, 2014, 5:00pm-6:15pm US Central Time. Lots of cool stuff, including the "App Install Recorder" (I will post the scripts on this blog); great new features...

Although the US Government has not published a US Government Configuration Baseline (USGCB) standard for Windows 8 or Windows 8.1, Microsoft has just published a beta release of Microsoft security guidance for Windows 8.1, Windows Server 2012 R2 and Internet...

A long time ago, before the introduction of the IBM Personal Computer, I was a DJ at the University of Virginia 's college radio station, WTJU-FM . Also around that time, Dischord Records in Washington, DC, released their first record, an 8-song 7" EP...

Earlier today I finally got the chance to go into the studio to appear on the "Defrag Tools" show on Channel 9. We talked about the upcoming Sysinternals book I'm writing with Mark Russinovich, and demonstrated a very cool "App Install Recorder" built...

Microsoft is pleased to announce the first Washington DC IT Pro Camp on Saturday, February 22 2014 from 8:00 am to 5:00 pm at Microsoft Training Center 5404 Wisconsin Ave, Suite 700 Chevy Chase, Maryland 20815 Parking and admittance to this event...

I should be working on the Sysinternals book , but there were a couple of KB articles about User Account Control that needed some work. Writing KBs is not normally part of my job; in the past 15 years I've authored two that I can remember (the ones described...

EventCreate.exe is a command line utility that comes with Windows that lets you write events into the Windows event log and to create custom event sources. For example, this command line creates an Information event in the Application log, associated...

When people asked me what it was like writing a book , I'd invariably answer, "It was a once in a lifetime experience. I hope." When they asked, "Are you going to write another one?" my answer was always, "No." (Actually, my answer was more emphatic than...

I wrote the first versions of VirtMemTest while working on the Windows Sysinternals Administrator’s Reference . The utility made it easy for me to perform a variety of memory operations and to observe how different Sysinternals utilities reacted...

There are five talks highlighting the Sysinternals utilities at TechEd North America next week in New Orleans. They all happen to be on Thursday, June 6. Click the session titles for more information. The videos should be on Channel 9 within 24 hours...

Microsoft's Trustworthy Computing (TWC) has just published a whitepaper, Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques , of which I am a co-author. It discusses PtH attacks against Windows operating systems, how the attack...

This paper describes a simple way to mitigate some types of application compatibility problems with legacy applications installed on 64-bit editions of Windows Vista and newer, including Windows 7 and Windows 8.  The technique relies on creating an NTFS junction or symbolic link, effectively “joining” two otherwise separate directory structures.  The paper provides technical details on the underlying concepts and on how to implement the mitigation.

...

Announcing the release of LUA Buglight 2.2, including support for Windows 8. LUA Buglight is an interactive utility that identifies admin-permissions issues (" LUA bugs ") in desktop applications. Version 2.2 (attached to this blog post) adds support...

The Windows Sysinternals Administrator's Reference that I co-authored with Mark Russinovich is now available in Russian! http://www.amazon.co.uk/Sysinternals-Spravochnik-administratora-Margozis-Russinovich/dp/5750204111/ref=sr_1_23?ie=UTF8&qid...

It’s one thing to have one's name associated with Mark Russinovich , but quite another to be quoted by Raymond Chen . I’m absolutely thrilled that Raymond quoted me in his Windows Confidential column in this month’s TechNet Magazine...

My colleague and debug super-guru Andrew Richards sent this announcement out earlier today: Larry Larsen , Andrew Richards and Chad Beeder are pleased to announce our new Channel 9 show called Defrag Tools . http://channel9.msdn.com/Shows/Defrag...

Part of my Sysinternals Primer: Gems presentation at TechEd last month covered the topics of terminal services sessions, window stations and desktops. To illustrate the concepts, I used a utility I wrote called TSSessions. As promised, I have attached...

The two sessions I delivered at TechEd this year are now available online, as is the recording of my live Channel 9 webcast with Microsoft Technical Fellow (and my co-author) Mark Russinovich from TechEd Europe. And as I promised attendees of my Sysinternals...

I'm presenting a couple of sessions at TechEd North America 2012 in Orlando (June 11-14) and at TechEd Europe 2012 in Amsterdam (June 26-29). The first session is " Sysinternals Primer: Gems ", the latest in the Sysinternals Primer series (*). In...

Let's Talk Computers ranks as one of the longest-running computer radio talk shows. I enjoyed it recently when they interviewed me about the Windows Sysinternals Administrator's Reference. They published Part 1 of that interview on March 3. Check it out...