mylifeinaminute.com

If you’re interested in some guides for further hardening your Windows 7/Windows Server 2008 R2 installations, Microsoft has just released their Common Criteria Supplemental Admin Guidance for Windows 7 and Windows Server 2008 R2.

What is Common Criteria?

From Wikipedia:

Common Criteria is a framework in which computer system users can specify their security functional and assurance requirements, vendors can then implement and/or make claims about the security attributes of their products, and testing laboratories can evaluate the products to determine if they actually meet the claims. In other words, Common Criteria provides assurance that the process of specification, implementation and evaluation of a computer security product has been conducted in a rigorous and standard manner.

Reference

• Common Criteria Supplemental Admin Guidance for Windows 7 and Windows Server 2008 R2
• Windows Server 2008 R2 Security Baseline
• Windows 7 Security Baseline
• Microsoft Security Compliance Manager

Well, the title says it all doesn't it? Windows Vista/7 (but mostly 7 as no one ever really used Vista) have a problem when accessing WebDav shares on sites with a fully qualified domain name (FQDN). This becomes very apparent with MS Office and attempting to access documents stored in SharePoint document libraries.

Most people would skip over the remainder of the article after reading that this issue was resolved after the release of Vista SP1. Reading on, one would learn that even with the hotfix, a registry entry must be created which will allow client side programs such as Office pass their credentials through to the server.

The following registry entry must be created:

1. Click Start, type regedit in the Start Search box, and then press ENTER.
2. Locate and then click the following registry subkey:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters

3. On the Edit menu, point to New, and then click Multi-String Value.
4. Type AuthForwardServerList, and then press ENTER.
5. On the Edit menu, click Modify.
6. In the Value data box, type the URL of the server that hosts the Web share, and then click OK. Note You can also type a list of URLs in the Value data box.
7. Exit Registry Editor.
8. Restart the WebClient service or reboot the PC.

Reference

• KB 943280

Do you have an MSDN subscription? If not, you should. The official beta of Windows 7 has been released. I suppose it’s time for some x64 Windows 7 fun. Oh, and the Server 2008 R2 beta is also up.