Home > NTFS and the Registry in Vista packaged up
Book Excerpt:
EMAIL THIS LICENSING & REPRINTS

NTFS and the Registry in Vista packaged up

18 Apr 2007 | Administering Windows Vista Security: The Big Surprises - An excerpt from Chapter 1, "Administering Vista Security: The Little Surprises"

Advice for securing Windows
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google

Windows Vista's little surprises
By Mark Minasi

Have a look inside Windows security guru Mark Minasi's latest book, Administering Windows Vista Security: The Big Surprises, with this excerpt from Chapter 1, "Administering Vista Security: The Little Surprises."



NTFS security extras
Setting NTFS rights to deny Delete permission

Administering computers with registry-based Group Policy

This falls in the category of a good surprise, in fact a really nice one: Both the file system and the Registry are now transaction based in Vista. This surprised me because it was supposed to appear in Server 2007 but it's in Vista. "Transaction based" means that you can take a number of separate files, copy, move or whatever operations you need, and essentially package them up so that they're all or nothing. If one of the operations fails, then you just "roll back" and everything done so far is undone.

Here's an actual example run:

Microsoft Windows [Version 6.0.5456]
(C) Copyright 1985-2005 Microsoft Corp.
C:Usersmark>transaction /start
A transaction has been successfully started.
Transaction ID: {1288b5a4-4b58-4006-88d8-6bc86f4b8ad3}
C:Usersmark>md newfiles
C:Usersmark>copy con newfilestest
hi there
^Z
1 file(s) copied.
C:Usersmark>dir newfiles
Volume in drive C has no label.
Volume Serial Number is 4834-858C
Directory of C:Usersmarknewfiles
07/17/2006 06:48 PM {DIR} .
07/17/2006 06:48 PM {DIR} ..
07/17/2006 06:48 PM 10 test
1 File(s) 10 bytes
2 Dir(s) 15,731,507,200 bytes free
C:Usersmark>transaction /rollback
The current transaction has been rolled back.
C:Usersmark>dir newfiles
Volume in drive C has no label.
Volume Serial Number is 4834-858C
Directory of C:Usersmark
File Not Found
C:Usersmark>
Here, I start a transaction, then create a new folder and put a file in that folder. But then I cancel the transaction, and it's all undone; asking for a directory listing of the new folder yields "File Not Found." In contrast, typing transaction /commit would have said "transaction's over, make it all permanent."

Where will this be useful? Well, File and Registry-based transactions will be pretty useful for applying patches. Heck, you could actually install and test a piece of software, and then uninstall it via a transaction rollback. But that'd only work if the software didn't require a reboot; any reboots act as a transaction /rollback. I suspect we'll find plenty of pretty valuable uses for this. (I've got to say it again: The word "patches" keeps coming to mind.)

Important warning
Unfortunately around RC1, Microsoft took the transaction command out of Vista. Apparently the under-the-hood support for transaction-based NTFS and Registry is still there, but the command itself posed some theoretical problems and so Microsoft decided that letting regular users like you and me set up transactions would be a bad idea. So unless they change their minds, then transactions will be something that only programmers can set up. (Which might make sense; it's just a shame.)

SearchWindowsSecurity.com also features excerpts from chapter eight, "Locking Up the Ports: Windows Firewall", of Mark Minasi's book, "Mastering Windows Server 2003 Upgrade Edition for SP1 and R2."

Mark Minasi is a best-selling author, commentator and all-around alpha geek. Mark is best known for his books in the Mastering Windows series. What separates him from others is that he knows how to explain technical things to normal humans, and make them laugh while doing it. Mark's firm, MR&D, is based in Pungo, a town in Virginia's Tidewater area that is distinguished by having one -- and only one -- traffic light.
Copyright 2005 TechTarget



Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


RELATED CONTENT
Microsoft Windows Vista Security
Microsoft Windows Vista: Security feature reviews
Windows Vista's little surprises
Windows Vista tips and expert responses
BOOT.INI is gone, BCD is here
Administering Windows Vista Security: The Big Surprises: Chapter 1 Administering Vista Security: The Little Surprises
Remote Desktop gets a bit more secure
Microsoft Windows Vista Security Center review
Windows Live OneCare 1.5: How does it compare?
Vista tested: Expert shares results
Hack into Windows Vista to test security features

Hardware
Free security testing tools for Windows handheld devices
Windows mobile security: Get it locked down
Limit network access points to boost endpoint security
Network security assessment for network infrastructure
Managing Windows network access on additional servers
Windows Server 2008: Looking good on the security front
Conquer forgotten Windows passwords with Password Reset Wizard
USB encryption security for Windows: IronKey review
Why you should plan Windows network security tests
What should I be asking a security vendor?
Hardware Research

Windows Vista Security: The Big Surprises
How to generate actions from events in Microsoft Vista
Vista's event viewer improves security management
New encryption options in Windows Vista
LM de-emphasized, NTLMv2 emphasized in Vista
Vista security option changes to named pipe access
BOOT.INI is gone, BCD is here
Remote Desktop gets a bit more secure

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsWebcastsWhite PapersIT DownloadsBlogs
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2004 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts