web metrics
November, 2007 - Microsoft UK Government Blog - Site Home - MSDN Blogs
Microsoft UK Government Blog
News and views from the Microsoft UK Government Team

November, 2007

  • Microsoft UK Government Blog

    Virtually Reduce Your Carbon Footprint

    • 0 Comments

    A few years ago, Nicholas Carr (a former editor of Harvard Business Review) set the cat amongst the pigeons with his thought-provoking book – Does IT Matter. With this book, Nicholas Carr forced us to re-examine some of our most basic assumptions about IT and business value and now he’s at it again with the revelation that an avatar, a virtual persona in the Second Life online world, consumes as much electricity as the average citizen of Brazil. You can read the full story here.

     

    Everyone in IT knows that they have a key role to play in reducing the carbon footprint of their desktop and datacentre operations. The amount of savings possible in power consumption and emissions are quite staggering. According to Gartner, IT accounts for about 2 percent of CO2 emissions - the same proportion as the aviation industry - with PCs being responsible for 40% of the total carbon emitted.

     

    One of the key technology solutions that can help to reduce the overall cost of IT operations is virtualisation. This is an area where Microsoft is developing capabilities to help reduce operating costs (particularly power consumption) and the carbon footprint of IT from the desktop to the datacentre. You can find out more about the Microsoft approach to virtualisation here.

     

    Posted by Ian

  • Microsoft UK Government Blog

    The PABX is dead

    • 0 Comments

    Now that I have your attention with that rather sensationalist headline, let me explain: Tayside Fire & Rescue is one of eight fire authorities in Scotland, providing emergency services to over 400,000 people in an area covering 7000 square kilometres, whose PBX telephony system was proving costly to maintain and adapt to their changing communication requirements.

     

    According to Gary Bellfield, Manager of Information and Communications Technology (ICT) at Tayside Fire and Rescue, “The last time we wanted to implement a single analogue extension in one of our fire stations, we spent more than £4,500.”

     

    Tayside has now complemented their PABX with a unified communications solution that enables them to provide a wider choice of communication options across their network of fire stations and administrative centres. The solution is also enabling more effective collaboration, document sharing and conference call facilities, all of which are helping to reduce the need to travel to meetings and increasing the overall productivity of their operations.

     

    You can read the full story on how Tayside Fire & Rescue are using unified communications here

     

    Now for the shameless plug – don’t forget that you can find out more about this and other public sector unified communication solutions by taking part in our Live Meeting (webcast) on Unified Communications on Tuesday December 11th. More information here

     

    Posted by Ian

  • Microsoft UK Government Blog

    Live Meeting on Unified Communications – Tuesday December 11th, 2007 – 10:00 to 11:00

    • 1 Comments

    Back in September I did promise to run a Live Meeting (webcast) on the first Tuesday of every month between 10:00-11:00 on a technology topic of relevance to the Public Sector. Next month, because of a clash of commitments, I need to make the Live Meeting the second Tuesday – December 11th.

     

    The topic is Unified Communications. The session will explore how Public Sector organisations can improve their communications with fully-integrated Internet voice (VoIP), messaging (email and instant messaging) and conferencing. The Live Meeting will also discuss how to reduce overall expenditure (e.g. travel costs) and help to meet reduced carbon footprint targets, through better communication and collaboration practices. Microsoft Unified Communications solutions are already enabling many organisations to achieve greater efficiencies in their communications, both internally and citizen facing, while helping to deliver more effective flexible and integrated working solutions that contribute to the productivity gains required by the Gershon review.

     

    All you need to do to take part in the Microsoft Live Meeting on Unified Communications in the Public Sector on Tuesday December 11th from 10:00 -11:00 is to activate the following web URL on your browser and connect to the conference call line:

    Logon to: Unified Communications in the Public Sector

    Conference call number (only required if not listening via the Internet):
    Telephone: 0118 909 2000
    Passcode: 1796572

    Also, you can find out more about Microsoft Unified Communication solutions here and replay any of the previous Live Meetings from our archive here

     

    Posted by Ian

  • Microsoft UK Government Blog

    Winter colds and flu – another business reason to encourage flexible and mobile working

    • 0 Comments

    My thanks to my colleague, Ray Fleming, in the Microsoft Education team for keeping us posted on the latest news from the Microsoft IT Forum in Barcelona this week. While Ray has been working hard in the Spanish sunshine, the reality of winter has begun to set in this week in the UK. Short days, long nights, cold weather and the first signs of winter germs making office colleagues sniffle and sneeze their way through the working day.

     

    Therefore, I was amused to come across this article on germs in the workplace, reporting on a research study completed by NTL:Telewest.  I am sure that the fact that the sponsor of the research provides business broadband is purely a coincidence. However, it is another example of the productivity gains that can be achieved from deploying flexible and mobile working solutions. We are certainly not advocating that ill people should be made to work but there are advantages in being able to provide those with a cold in the nose with the option of working remotely and thereby reducing the risk of infecting colleagues throughout the office.

     

    Sometimes, the business value of technology can be somewhat unexpected!

     

    If you would like to receive a copy of the Microsoft Flexible Working Solutions for Local and Regional Government – Benefits Paper, developed in collaboration with the Microsoft Local Authority Shared Learning Group, send an email to: lrg@microsoft.com

     

    Posted by Ian

  • Microsoft UK Government Blog

    IT Forum: SQL Server 2008

    • 0 Comments
    logo_people7

    Yes, I know you might still think of SQL 2005 as a new product, but SQL 2008 is nearly with us and there are many reasons why people are looking to upgrade.  There was a useful session at IT Forum which looked at the release of SQL 2008, and explored the new facilities that it will provide.
    In a nutshell, it promises:

    • Managing massive amounts of data on multiple devices
      • Data is everywhere and needs managing. Consider the fact that many laptops can have around 1 TB of storage. How do you manage that type of distributed data model?
      • SQL 2008 has enhanced database mirroring to improve performance, thereby resulting in improved resilience. And also has optimised and predictable performance.
      • Connect data from any device such as PC, laptop or phone
    • Bringing Business Insight to more users and making this simpler
      • The ability to get the data out in a way that makes it useful to the right user communities/individuals in the organisation - to get more value out of their Business Intelligence.
      • Every user can get actionable insight - delivers information via MS Office with better integration between Word and Excel to bring data mining to a much broader audience
      • There's a fantastic new report writer tool, with excellent visualisation.
    • Spatial data management
      • This spatial ability is built into all flavours (including the free SQL) at no additional cost.
      • A great example used was how many coffee stores are within 1 km from the route to work? The answer is spatial and not traditional SQL. So the simple thing is to use longitude and latitude as the storage type, and when combined with a simple map and http://maps.live.com it's really powerful.
    • Transparent data encryption
      • The application, e.g. SAP or an internal system, does not need any changes for the database to be encrypted.
    • Sight and sound data types
      • This allows documents to be stored in a more cost effective manner.
      • Users can access these documents as data with full text search, query across relational and text data.
    • The same pricing for SQL2008 as for SQL 2005

    Posted by Ray

  • Microsoft UK Government Blog

    IT Forum: Microsoft Search Server 2008

    • 0 Comments

    There's a phrase - "Enterprise Search" - which summarises the next step in effective use of technologies for collaboration, data sharing and making your institutional memory more accessible. By this I mean, when anybody in your organisation publishes a piece of information that they want to share, you need to make that information available to other people in an easy way - a way that doesn't require them to remember where that information is stored. Another step in journey towards improved information availability is the expanding range of options available to help you to search your internal IT systems.

    I wonder how many people know about our Search story for the enterprise? It seems that it's mostly the SharePoint enthusiasts and not many others.  This is likely to change following our recent launch of our new Microsoft Search Server (MSS) 2008 - there's plenty of information on this at: www.microsoft.com/enterprisesearch

    At IT Forum today Richard Riley talked us through the two flavours of search available, which are:

    • Microsoft Search Server (MSS), which has a cost associated, and MSS Express (MSSX) which is free.  Both only take less than an hour to install and configure and then away they go and trawl your information resources to create a full, enterprise aware search capability that your users can start getting the benefits of immediately.
    • MSS 2008 is built on WSS 3.0 (Windows SharePoint Services 2007)

    The big area of investment in MSS 2008 is Federation.  This means that it will display the results from other search engines or applications displayed alongside local results.  MSS will send a query to other search engines or data query services and format them for the user.

    • It uses OpenSearch 1.0/1.1
    • To add a new federated search location is remarkably simple.  For instance to add a new location like Yahoo simply take the URL from a search on Yahoo and for the search term simply edit the URL and insert {searchTerm} and away you go. Richard did this live in the event and it did look simple. 
    • And there are ways to search sites which don't support OpenSearch - like Wikipedia - that uses another search engine (eg Live Search) as the intermediary.
    • If the search locations is not supported by MSS out of the box then build or buy a connector - and we've created a forum to share connectors others build.
    • Authentication is integral to MSS which means that you can enable the search to recognise users' authentication settings to access pools of information be they file based or application, such as database, related.

    The benefit of Federated search is that you can anticipate that users may be intending to find a wide range of information. Somebody searching within your organisation for "data protection policies" could be looking for information on your data protections policies (likely to be on your internal portal), or they could be looking for Internet articles or definitions. By using Federated search, you can produce internal and external sources on one page of search results. You can also use this method to search your internal SharePoint and your own public-facing website, which may be hosted on a completely different IT system.

    Some of the launch partners with connectors are OpenText, Business Objects, Cognos and Symantec plus around 10+ others.

  • Microsoft UK Government Blog

    IT Forum: Virtualisation - it's no longer about virtualisation

    • 0 Comments

    "The value in virtualisation technology moving forward will be in the management and the operating system rather than in the virtualisation stack."

    I attended an interesting session at IT Forum today from Guillaume Field, from Dell.  He started the session off by saying something along the lines of "you are all buying way too many servers and we want you to stop".  Controversial stuff to hear from a guy at Dell.  However, he then went on to say that that all these servers people are buying are doing the wrong thing and virtualisation is the way to get them back on track.

    It seems that of all the power put into a data centre, only 4% of it is actually turned into compute power.  Match this with the fact that most servers are only at around 5-15% utilisation you can see what Guillaume is getting at with his opening statement.  By continuing with the traditional model of 'new application=new physical server', we are seeing compute power increase and utilisation decrease.  Dell's data centres are so full that they are only allowed to implement a new server if they remove one.  Without virtualisation this would limit their ability to grow their business.

    The power of the new x86 servers is still growing according to Moore's law, so theoretically as Dell does replace servers in its data centre with a strategy to virtualise, they will see utilisation increase as compute power increases.

    The point about the value being in the management is absolutely crucial to this and Guillaume's outlined Microsoft's strategy to have one Management interface for all its virtualisation products (Terminal Services, SoftGrid, Virtual PC and Virtual Server).  Naturally the Management Interface to do this is Microsoft System Centre which is also the tool you are using to manage the rest of the estate.  Simple!

    Posted by Ray

  • Microsoft UK Government Blog

    IT Forum: Windows Vista and Security

    • 0 Comments

    In a recent survey, 70% of (male) drivers said that their driving skills were "above average". Which tells you that most people think that they are better drivers than the others on the road. Well, PC security is probably like this - most users think that they know more about making the right decisions than the "average user". Which means they are likely to think that security features are there to protect others from their own mistakes - whereas they themselves, surely, don't need security measures because they know what they are doing. Of course, you know this isn't true (except, of course, in your case!)

    logo_people7 So this morning at IT Forum, I joined a security session with Rafal Lukawiecki & Steve Lamb, subtitled "How to do more business with less risk". I was interested to hear their perspective, because my main experience of IT is as a user, and security always seems to be designed to get in my way and is designed to stop me doing things I need to do (okay, I'm realistic, and do recognise sometimes that it's there for my benefit)


    Rafal and Steve's perspective was that while there are many new areas of security that are built-in to Windows Vista, there are 3 or 4 key features which everybody should be looking at, and thinking how it will help them to manage their IT infrastructure.

    Here are those key security features:

    • User Account Control (UAC) - For me, this is definitely contentious, because along with the upside of enhanced security, comes the downside of more frequent warning messages, and the user being asked to allow applications to run. One of the unfortunate side effects of UAC is that it tends to be quite intrusive in the first few weeks of a new PC. This means, as you're getting used to Windows Vista, you get a pile of messages popping up saying Are you sure you want to install this software? Do you really want to add a printer?  Defragment your drive - are you sure? It's a classic case of security versus ease of use. The ease of use view (ie the one from your users) argues for switching it off - to stop them being interrupted as they work and install programmes. The security argument (ie yours!) is to leave it enabled, so that your users have the safest settings.

      The really important message that came out, from both the speakers and those IT administrators in the audience, is that after a couple of weeks, the level of interruptions reduce dramatically, so don't rush to disable UAC in the first few days, but live with it for a fortnight, by when it will be a lot less intrusive. By leaving it on, you get enhanced security, and you, and your users, will have more protection.

     

    • BitLocker - Rafal counted this as one of the key security elements of Windows Vista, specifically because it's a "set and forget" security technology. Once you have enabled BitLocker encryption, all of the data on your hard drive is secured against unauthorised access. For any organisation when IT users may have personal data on laptops (and the public definitely fits into that category, especially given the amount of sensitive data that potentially sits outside of the core database servers), it's something to explore and implement (did you know that worldwide, 350,000 laptops were stolen or lost in 2006?)

      The important thing to remember when you enable BitLocker is to make sure the access key is stored away somewhere you can get it - perhaps in your Active Directory - so that you can recover the data if the user forgets their logon credentials. Rafal talked about an unnamed customer, where they had a requirement that any attempt to access the data would destroy it - even a system administrator inside the organisation. So for them, the recovery keys were not stored - if the user lost their logon credentials, that would be the end of the data on the hard drive!

     

    • USB controls - there was a discussion about the use of USB controls, to stop users adding memory keys and potentially introducing viruses, unauthorised software and allowing the removal of critical data. One of the points that came across was to think at a higher level - because if you block USB, you simply move the problem to another place (eg my laptop has an SD Card slot  - so I could do all of the above through that instead). The recommendation was to start by looking at what you are trying to prevent - looking at the behaviour - and then addressing that through better policy management and more proactive management of your data and users.

    Two excellent security nuggets from Rafal and Steve:

    • Passwords - At the office, I have to use strong passwords - which means at least 8 letters, including upper and lower case, and non-alphabetic characters. As you can imagine, this is a bit of a pain to remember, every time I have to change my password. The recommendation from Steve & Rafal was for teach users about "pass phrases", to help them to create and remember strong passwords. It's good because it is simple. The basic idea of a pass phrase is that you encourage the user to create and remember a phrase (like "This Week Is Get Safe Online Week 2007"), and from that I create a strong password using the first letter of each word ("Twigsow2"). The password is more memorable to me - I remember the phrase, but unintelligible to anybody trying to guess my password, because it makes no sense.

     

    • Keyboards - Always used a wired keyboard if you are worried about security. I know it's cool and trendy to use wireless (either bluetooth or RF wireless) keyboards, but did you know it is possible to pick up a signal from a specific RF keyboard from a satellite in space! Think about it next time you type in your strong & secure password!

    The overarching message was:

    - You need tight security to make your systems reliable, and keep your data secure

    - Your users want ease-of-use, and security gets in the way of that sometimes

    The answer is to find the right compromise, because too much security will encourage users to find ways around your security; too little security might make your users happy but give an unacceptable risk for your business systems.

    One recommended way to get your users on your side is to show them what the implications are if they don't pay attention. For example, if a user leaves a computer logged on, and leaves their desk, what information could another person see? Or who could be emailed from their Contacts list? Simple examples help to reinforce the message that a simple step like locking your machine (Windows Key + "L") is simple and improves security significantly.

    Steve's blog is a good source for further information on this subject, and to explore the subject further.

  • Microsoft UK Government Blog

    IT Forum: Threat Research and Response

    • 0 Comments

    Vinny Guloto, General Manager for the Malware Protection Centre, presented today on the work that the centre is putting into the world of threat research, and both reactive and proactive response.

    One of the interesting slides that Vinny used was about the history of development of industry standards in anti-virus development, and how the anti-virus marketplace has grown. It was broken down into:

    • 1986 - 1990
      Very few viruses existed, and researchers in virus protection worked alone within their individual companies.
    • 1990-1995
      Anti-virus organisations started to share information, and formed groups to build a common language, and started effective sharing across the industry. The AVPD created the "wildlist" and "wildcore" - starting to share standard signatures across the 20,000 viruses that were loose around the world at that time. This was pretty important to everybody - if you don't have all the viruses available, how can you develop detection and defence against it? (And, you don't want your AV software to rely on you being infected before they can work out how to prevent it!)
    • 1995-2005
      All certified Anti-Virus software has to be able to detect all wildcore samples - a list which is expanding by 20-30 categories every month.
      By this time, the virus distributions (ie the virus signatures shared between anti-virus companies) exceeds the gigabyte mark for the first time.
    • 2005-2007
      The Anti-Virus Coalition was formed. One of the shifts much more visible now, is that developing countries tend to be harder-hit by viruses as they come online. In India, China etc, the level of infections tend to be higher, because they are going through the learning experience we all went through before (When did you realise that you couldn't run a machine without virus protection?).
      Today there are 225,000 - 300,000 viruses in circulation.

    More than 3,400 new software vulnerabilities were reported in the first 6 months of this year (please note, this isn't 3,400 vulnerabilities in MS software, but across the whole software marketplace that could threaten your PC or data). Seemed like a lot to me, until Vinny explained this is actually a decrease in a six month period for the first time since 2000.

    Windows Defender is a piece of free software from MS which looks for things like adware and spyware, rather than specifically "malicious" software - it isn't anti-virus software. Using Windows Defender as an example, he shared some statistics:

    • In the first six months of 2007, it detected 50 million pieces of potentially unwanted software
      • 16 million items of Adware
      • 7 million items of "potentially unwanted software"
      • 6.5 million Trojans
      • 3 millions items of "remote control" software

    After the presentation, it is often the Q&A which contains a startling revelation. And this session was no different. Following a question about how things are changing, he threw in a statistic that was almost a throwaway - that the Malware Protection Centre have found that with Defender, Windows Vista machines have 3 times less "potentially unwanted" software than other Windows machines. Which provides a real life example of the way that the security built into Windows Vista is delivering (silently!) benefits to both the end user and the IT team running their networks.

    To read more about the work that Vinny's team do, check out their Microsoft Malware Protection Center Portal

    Posted by Ray, at IT Forum

  • Microsoft UK Government Blog

    IT FORUM: Windows Server 2008

    • 0 Comments

    I'm at the IT Forum event this week - it's a week long tech-fest about current and future technologies from Microsoft. This year's event has 5,200 delegates and we're all sitting in a conference centre on the shores of Mediterranean in Barcelona (not quite as wonderful as it sounds - it was 10-degrees when we got here, and I didn't even think I needed a coat...brrrr). We're joined this year by around 100 IT staff from public sector organisations around the UK, all here for the same thing - to get a behind-the-scenes, and in-depth look at the software that runs their services, and to see how new releases can help to improve your service delivery. 

    I'm going to do my best to bring you some of the headlines of the event, and their relevance to you.

    Windows Server 2008

    The opening keynote focused on Windows Server 2008 - the first of a launch wave of products due to be launched on 27th February. It will bring a wide range of new features and functionality which will be useful, such as:

    • Network Access Protection - allowing you to build policy based protection for devices connected via wired connections, wireless or VPN to your network. With this, you can set a quarantine mechanism, where newly connected devices are automatically quarantined until they have run through a security policy check, and that allows you to enforce your policies (eg, all Windows devices must have the latest security updates installed and up-to-date anti-virus definitions). The ability to differentiate between policies for wired and wireless is useful - for example, it could help you to minimise inconvenience to wired staff, whilst maximising security for transient wireless users who are more likely to be using their computers out of the office, where they may be more at risk of security threats.
    • Security by design - the core idea of Windows Server 2008 is that you only install the components you need, and not the reverse (today's model installs virtually everything on the server, and expects you to switch things off). This will provide better base-line security, and mean you will need to spend less time patching your servers with the latest updates. The outcome? Improved up-time, and less time spent fire-fighting.

    More detail on the Windows Server 2008 and Hyper-V announcements

    Virtualization*

    This has been the buzzword of the afternoon. And what's available helps meet some of the the unique challenges of public sector IT systems supporting a range of different departments - the expectation from users that they can run whatever applications they want, at the drop of the hat. Oh, and that you'll keep the IT Services up and running whenever they need access.

    We've got virtualization technologies coming out of our ears at the moment - Applications virtualization (through SoftGrid/Microsoft Desktop Optimisation Pack); Presentation virtualization (through Terminal Services); Desktop virtualization; and enhanced Server virtualization (through Windows Server 2008).

    • Server virtualization under Windows Server 2008 has been officially called "Hyper-V" - an enhanced way of running and managing virtual servers, with an enhanced set of services through System Centre (System Centre Virtual Machine Manager & Data Protection Manager were announced today), designed to better integrate the management of your physical and virtual IT services. On the stage here at IT Forum, Bryon Surace (no, not a typo) showed us a server hosting 4 flavours of Windows Server 2008 (including the 32-bit and 64-bit versions) running alongside a full Suse Linux server, in a single virtual environment. He also announced new tools to integrate Linux servers onto the Windows Server 2008 platform.
    • Application virtualization options seem to be expanding rapidly at the moment. Although there are not a wave of new product announcements (although Beta 1 of the Microsoft Application Virtualization was announced), it has become clearer how the different approaches can allow you to enhance your service delivery, and give your users a little more flexibility without having to compromise your core service delivery.

    More info on the System Center announcements

    Posted by Ray, at IT Forum

    * Which is it? Virtualisation or Virtualization? Normally, I go for UK spellings, but the latest versions of the Oxford dictionary seem to be shifting to a more agnostic approach on Americanised spellings - on this occasion, I'm going to go with it, because we've got product names in here too. Does it really matter? Do you care? I've know that some of the online training providers find they get a lower completion rate on versions using American spellings - sometimes 50% of the normal rate. Does that mean I've lost half of you half-way through this article? Discuss...

Page 1 of 2 (15 items) 12