Re: How do you patch yours? (was: Monitor Services on Windows machines)

On Thu, Feb 27, 2003 at 10:35:18AM +0100, Tommaso Di Donato wrote:
> Hi all!

Hey Tommaso, you sent this to only me. I think you meant to send it to everyone :-)

> >Windows 2000 gave us the 'indexing service'. a) this hurt performance,

It is not up to Microsoft to educate you. It's up to you to educate yourself.
Microsoft cannot know to what extend you need to be educated. Yes, they could release a *LOT* more information on how the different parts of their operating systems interact, enough information that you are able to work out on your own what the end result would be. I see no reason for them not to do this, from a technical OR business perspective.

But still, the eduction in either scenario is your responsibility. If you administer systems, no matter what the OS, it's up to you to try different things, to deliberately try and break things, in order to understand what the limits of your system are. This extends far beyond security, into the basics of being a good administrator. If you don't have these skills or the time to learn them, well.... that's another discussion.

Putting general administration aside and focusing on security again, when a new "feature" is introduced, you need to gather as much information on it as you can, then apply it to find out if the "feature" is required or not. Really you only need to consider the security implications in depth if you decide the feature is required and so must stay on. If it's not required, you turn it off. I also disagree that eduction as you imply for these new features, is hard to come by. It's not really. The MS KB is a good start, and google+usenet have always given me what else I need. Received on Thu Feb 27 12:42:40 2003