Welcome to the Security Garden, where everything is coming up roses.
The best way to protect your garden is to fence it in. The same applies to your computer.
Get computer security news and information, help, tips and more at the Security Garden.
The Microsoft Outlook team is notifying users via email about upcoming changes that will result in the inability to access email from @outlook.com, @hotmail, @live or @msn email accounts in Microsoft Outlook 2003, 2007 and 2010.
Although I may be completely wrong, the notification implies to me that the Outlook.com Preview is ending and the final changes outlined by the Outlook team in May (New ways to get more done in Outlook.com) will be rolling out .
Regardless, after the changes have been made and email is no longer appearing in the Outlook client, users of Microsoft Outlook 2003, 2007 or 2010 will need to follow the steps documented in the email from the Outlook team, copied below, in order to to resume receiving email from those accounts.
Update 12DEC2015: The links below now yield "Internal Server Error". Fortunately, fellow Microsoft MVP Noel Burgess pointed me to another MVP's website which includes the needed information. See Diane Poremsky's article, Outlook.com Migration Status.
"Hello,
In the next few weeks we’ll be making some updates that will impact your @outlook.com, @hotmail, @live, or @msn email account. Those changes will prevent your email from getting delivered to the Outlook desktop application you use. When you notice that you stop receiving messages, simply follow these two steps:
When the update happens, you may not be able to refer back to this email in your Outlook desktop application. We recommend bookmarking or saving the two links (remove and re-add) in steps 1 and 2 above that apply to the version of Outlook you’re using. Remember, you can always access this message by logging into your account at www.outlook.com at any time.
If you don’t know what version of Outlook you have, you can click here for instructions to find out.
Thanks for your understanding and continued use.
Sincerely,
The Outlook team"
Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...
In another step to create consistency between Microsoft products, Outlook.com now includes the App Launcher that is part of Office 365. One click on the App Launcher opens the view shown below. Merely click the destination and it launches!
The App Launcher makes it easy to toggle between your calendar, OneDrive and the Office Online applications. If you are using the free Outlook.com email service (@outlook.com, @hotmail.com, @live.com, or @msn.com), see how easy it is to use.
If you click the App Launcher and change your mind about leaving the service you are currently, merely click in another spot on the page or click the Launcher again to close it.
The Microsoft Office team has been busy adding new features and improvements to the Microsoft Office Web Apps. Listed below are the changes being made to the Office Web Apps since my April 2013 article, Using Microsoft Office Web Apps. Word App:
A significant improvement is the added ability to find and replace words and phrases. You will now also be able to apply styles and formatting to tables and insert headers and footers.
Excel Web App:
Additions to the Excel Web App include the new ability to drag and drop cells and reorder sheets. A quick analysis of a range of data in the status bar (including sum, count, and average of a selected range of cells) has been added. In addition, there is support for more workbook types online.
PowerPoint Web App:
New
picture cropping functionality has been added to the PowerPoint Web App
and the name of your files can now be changed not only within the editing window of the PowerPoint Web App but also across the other Office Web Apps.
Microsoft released Security Advisory 2896666 which relates to a vulnerability in the Microsoft Graphics component that affects Microsoft Windows Vista and Windows Server 2008, Microsoft Office 2003 through 2010, and all supported versions of Microsoft Lync.
Microsoft is aware of targeted attacks primarily in the Middle East and South Asia that attempt to exploit this vulnerability in Microsoft Office products.
The vulnerability is a remote code execution vulnerability that exists in the way affected components handle specially crafted TIFF images. The vulnerability is exploited either through previewing or opening a specially crafted email message or file. It is also exploited by browsing similarly web content. The attacker could gain the same user rights
as the current user.
Recommendations
Microsoft has made available a Fix it solution which will disable the TIFF codec. Below are the links to both enable and disable the Fix it solution.
What can you do when you need to quickly create several new slides for a PowerPoint presentation and Microsoft Office is installed on your computer at home, not the computer you are using now? Microsoft Office Web Apps to the rescue!
Other examples of occasions ideally suited for Microsoft Web Apps include team projects such as managing a Little League team or planning the
neighborhood street party that involve multiple people needing the ability to
work from the same file. Microsoft Office Web Apps are also a perfect solution for people who seldom need to create a Word, Excel or other Office document.
Microsoft Office Web Apps are a simple way to
create a Word document, Excel spreadsheet, PowerPoint presentation or
OneNote notebook while on the go, save the file to SkyDrive and then email the
file with Outlook.com or do additional editing later with Microsoft Office.
Creating Microsoft Office Web Apps
These simple steps illustrate how easy it is to create Microsoft Office Web Apps. All you need to get started is a free Microsoft Account, an Internet connection and you are ready to go.
There are two ways to access Microsoft Office Web Apps.
1. If you are already logged on to Outlook.com, merely click the arrow to the right of then click the SkyDrive icon.
After SkyDrive opens, click Create and select the type the type of file you need to create.
2. The second method is to go to Office.com click the "My Office" link and sign on with your Microsoft Account.
Scroll past your SkyDrive files and click the appropriate icon located under the Create New heading, depending upon the type of file you need to create.
Whether you access Microsoft Office Apps directly from SkyDrive or from the Office.com portal, the rest of the steps are the same.
Using Word as an example, a blank document will open with all of the standard formatting tools you are accustomed to finding in the ribbon readily available, including spell check!
Split between the two screen captures below is a copy of some of the formatting features available in the Microsoft Word Office App.
When you have finished creating your document, merely click the save icon or File > Save.
Share the File
After you have finished creating/editing your document, it is just as easy to share the file with team members, co-workers, family, etc., as appropriate as it was to create the document.
If you are ready to share the document, you can do it right from SkyDrive. Merely click "Share" and you can type in an email address or use one already in your Outlook.com address book.
Select whether the recipient(s) need the ability to Edit the document. If it is a business file, check the requirement that recipients need to sign in.
You can also attach the document to an email from Outlook.com. Merely create your email and click the paperclip. Click your SkyDrive app and select the document. At this point, you can elect to send the file using SkyDrive or attach the file, in which case the recipient can download the document.
Are You Ready Now?
You can see how easy it is to use Microsoft Web Apps. Give it a try and if you have questions, leave a comment. I'd also love to hear from you if you use Microsoft Office Web Apps for a group or team project.
Update: This short video by MSFTOutlookillustrates the simplicity of combining Outlook.com, SkyDrive and Microsoft Office apps in your everyday life:
Update 2: Consumer Camp is an excellent resource for, you guessed it, consumers! The purpose of Consumer Camp is to "showcase Microsoft’s consumer-facing technologies, through education and engagement."
To learn even more about Microsoft Web Apps, set aside 15 minutes and visit the link below to watch the Office Team's video shared by my friend and fellow Microsoft MVP, Marques Lyons: Getting things done with Office Web Apps.
~ ~ ~ ~ ~ ~
Note: I am a SkyDrive and Outlook.com Insider. If you have a question about this article, please leave a
comment and I'll do my best to assist.
Learn more about the SkyDrive Insiders program here.
Learn more about the Outlook.com Insiders program here.
Do you use SkyDrive only for storing photos and miscellaneous files? What about important correspondence or files containing personal information? What about sensitive files such as tax returns or copies of bank statements?
The question about sensitive information was raised in the comments of my article Moving to SkyDrive regarding the security for sensitive files on SkyDrive:
"Is Skydrive suitable as a place to sync/save sensitive information (e.g.
tax/financial records) or is it just really for things like photos,
unimportant Office files etc? It would make things simpler for me if I
could use Skydrive to sync all my files including the sensitive ones,
but I am hesitating on security grounds."
In retrospect, my immediate reaction to the question was short-sighted:
"Short answer: Yes, sensitive documents (e.g. tax/financial records)
saved to SkyDrive are secure. The only way to access those files is by
secure logon with your Microsoft Account.
Additionally,
regardless of whether anyone uses SkyDrive or not, I strongly recommend
taking the steps to protect your account. This article written for
"Hotmail" equally applies to the revamped Outlook.com: Hotmail Security to Protect and Recover Your Account ~ Security Garden."
Why, after reconsideration, do I consider my response short-sighted? Let's take a closer look at transporting and accessing files on SkyDrive.
Transporting Files to SkyDrive
When saving your files to SkyDrive, the method used for transport encryption of your data from your computer to SkyDrive is called Secure Socket Layer, or SSL. SSL protocol uses standard key cryptographic techniques for the communication session between the client (your computer) and server (SkyDrive).
Thus, during transit from your computer to SkyDrive, your data is protected from interception and is
reachable and readable only on SkyDrive. However, it is important to consider that SkyDrive does not include any additional encryption on the files after being uploaded.
Update 06Dec2013:
Please see this important information by Brad Smith, General Counsel
& Executive Vice President, Legal & Corporate Affairs,
Microsoft, about plans to strengthen the encryption of customer data
across Microsoft networks and services. Protecting customer data from government snooping.
Accessing Files on SkyDrive
The default setting of files saved from your computer to SkyDrive is set to "only me". Thus, no one can view your files and documents
without your consent unless you intentionally select the folder and change the setting. (See this Microsoft help document for instructions on how to Share files and folders and change permissions.)
In other words, the only way to access the files set to "only me" is by logging on to SkyDrive with your Microsoft Account. But, what if your Microsoft Account is compromised or if you inadvertently change the setting to public?
Another situation that could compromise the security of sensitive information is that anything uploaded via a mobile device is automatically stored in the Mobile uploads folder. Fellow Microsoft MVP, Richard Hay, discovered recently that the Mobile uploads folder in the SkyDrive cloud storage is set by default as Shared with Friends. The default setting can be changed by logging on to your SkyDrive account via your browser.
Securing Sensitive Files
There should be no concerns about security of your files stored in a private folder on SkyDrive, accessible only by you when you logon with your Microsoft Account. However, for sensitive files, you may want to add an additional layer of protection to those files.
Important: Be careful to note somewhere offline the password used to protect your Office files. There is no way that Microsoft can help you retrieve forgotten passwords.
This program has been discontinued. As a SkyDrive Insider, I am excited to share information about
SkyDrive. If you have a question about this post, please leave a
comment and I'll do my best to assist.
Learn more about the SkyDrive Insiders program here.
Service Pack 1 for Microsoft Office 2010 and Sharepoint 2010 was announced at TechNet Atlanta.
As of this timing, the service pack is scheduled to be released the end of June. It will initially be available from both the Download Center and Microsoft Update and will include all language versions. The service pack will not be included as an Automatic Update until at least 90 days after the initial release.
In addition to including public and cumulative updates, below is a sampling from the Microsoft Office Blog of highlighted changes to be included in SP1.
Outlook fixes an issue where “Snooze Time” would not reset between appointments.
The default behavior for PowerPoint "Use Presenter View" option changed to display the slide show on the secondary monitor.
Integrated community content in the Access Application Part Gallery.
Better alignment between Project Server and SharePoint Server browser support.
Improved backup / restore functionality for SharePoint Server
The Word Web Application extends printing support to “Edit Mode.”
Project Professional now synchronizes scheduled tasks with SharePoint task lists.
Internet Explorer 9 “Native” support for Office Web Applications and SharePoint
Office Web Applications Support for Chrome
Inserting Charts into Excel Workbooks using Excel Web Application
Support for searching PPSX files in Search Server
Visio Fixes scaling issues and arrowhead rendering errors with SVG export
Proofing Tools improve spelling suggestions in Canadian English, French, Swedish and European Portuguese.
Outlook Web Application Attachment Preview (with Exchange Online only)
Microsoft Office has so many formatting and editing features, it is difficult to remember where everything is located. In addition, many long-time users of Microsoft Office have found the Ribbon confusing.
The Microsoft Office Labs has a solution in the form of a simple add-in called Search Commands. Search Commands has been available for a while now, but it seems to be a little-known add-in. Search Commands will help you quickly find the commands you need in Microsoft Office 2007 and 2010 Word, Excel and PowerPoint.
To launch Search Commands, click on the Search Commands tab in Word, Excel and PowerPoint. If you prefer keyboard shortcuts, click the Windows Key + Y combination.
As illustrated in the images below from Office 2010 and Office 2007, the search mechanism is very intuitive. Merely typing "insert" in the search box yielded the most commonly searched information:
Try it. You'll like it.
If you are new to the Ribbon, you may also find the information at Office.com helpful: Office Ribbon Find Commands.
Requirements and Download Information
Requirements: Windows XP or later. Office 2007 or Office 2010 32- or 64-bit.
Limitations: English only. Works with Word, Excel and PowerPoint only.
Microsoft released two (2) security bulletins, one (1) rated Critical and other is rated Important. Both bulletins relate to remote code execution.
Below is the description of the bulletins, as described in the MSRC Blog:
"MS11-035 (WINS or Windows Internet Name Server): This security update resolves a privately reported vulnerability in the Windows Internet Name Service (WINS). The vulnerability could allow remote code execution if a user received specially crafted malware on an affected system running the WINS service. By default, WINS is not installed on any affected operating system. Only customers who manually install this component are affected by this issue and will be offered the update.
MS11-036 (PowerPoint): This security update resolves two privately reported vulnerabilities in Microsoft PowerPoint. The vulnerabilities could allow remote code execution if a user opens a specially crafted malicious PowerPoint file. An attacker who successfully exploited either of these vulnerabilities could gain the same user rights as a logged-on user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. "
Support
The following additional information is provided in the Security Bulletin:
The affected software listed have been tested to determine which versions are affected. Other versions are past their support life cycle. To determine the support life cycle for your software version, visit Microsoft Support Lifecycle.
Customers in the U.S. and Canada can receive technical support from Security Support or 1-866-PCSAFETY. There is no charge for support calls that are associated with security updates. For more information about available support options, see Microsoft Help and Support.
International customers can receive support from their local Microsoft subsidiaries. There is no charge for support that is associated with security updates. For more information about how to contact Microsoft for support issues, visit International Help and Support.
The Mouse Training Company is providing all of their Microsoft Office training manuals available to download for free. The files are in PDF format.
The Office 2010 materials are quick reference guides. For Office 2007, in addition to the quick reference guides, the Mouse Training Company has additionally made their complete training manuals available for download. Materials for earlier versions of MS Office area also available.
In checking the available materials, I downloaded the Word 2010 Quick Reference Card. Although it is only two pages, the Quick Reference Card is packed with information and would be a handy tool to keep near your workspace.
The complete training materials provide both mouse and keyboard instructions for completing tasks. For example, the 158 page Word 2007 Advanced Training Manual, provides the following information on "Splitting a Table":
Splitting A Table
Sometimes you need to split a table between rows to add text in-between. To split a table in two at the current cursor position:
Mouse
i. Select the cell(s) you wish to split
ii. Go to the MERGE group on the LAYOUT ribbon and click the SPLIT TABLE button.
Or
Keyboard
i. Press CTRL SHIFT ENTER
On Tuesday, February 9, 2011, Microsoft is planning to release twelve (12) security bulletins addressing 22 issues in Microsoft Windows, Internet Explorer, Office, Visual Studio, and IIS. Three bulletins are rated Critical, the remaining nine are rated Important.
The scheduled updates will be addressing Security Advisory 2490606 (public vulnerability affecting Windows Graphics Rendering Engine) and Security Advisory 2488013 (public vulnerability affecting Internet Explorer).
Important Note: If you installed Microsoft Fix it Solutions for two either or both of the two Security Advisories, they need to be disabled prior to installing the updates. As noted in Microsoft Fix it Available for Security Advisory 2488013, it is particularly important that the Microsoft Fix it be disabled.
There are occasions when it is not possible to uninstall Microsoft Office products via the standard uninstaller via the Control Panel. In other situations, the installation of one of a Microsoft Office suite did not complete, leaving a corrupt installation.
The first step to removing the Microsoft office suite is to verify that using the standard procedure will not work. Select the correct steps from below for your operating system:
Windows XP or Windows Server 2003
Click Start, click Run, type control appwiz.cpl in the Open box, and then press ENTER.
Click to select the Office system product from the application list, and then click Remove.
Windows Vista and Windows 7
Click Start, type programs and features in the Search box, and then press ENTER.
Click to select the product to be uninstalled from the listing of installed products, and then click Uninstall/Change from the bar that displays the available tasks.
In the event you are still unable to remove the Office suite, continue with the steps below to run the Microsoft Fix It solution.
Notes:
The Fix It solutions will not remove any Office program that was installed separately from the Office suite (i.e., with both Microsoft Office Professional 2007 and Microsoft Office Visio 2007 installed, only Microsoft Office Professional 2007 will be removed.)
Select the appropriate Microsoft Fix It solution for the version of Office to be uninstalled.
Windows 32-bit operating systems: Click Run in the File Download dialog box, and then follow the steps in the Fix it wizard.
Windows 64-bit operating systems: The solution will not work correctly if you try to run the Fix It directly from the article. Download and save the Fix It solution to your desktop. Then double-click the saved file and run it on your computer.
After running the Fix It solution, restart the computer.
If you were using the Office 2010 Beta and discovered that it has suddenly stopped working, that is because the Beta officially expired yesterday, October 31, 2010.
It is necessary to uninstall the Beta software from your computer before you can use the released version of Office 2010. To do this, go to the Control Panel in Windows 7 (or Windows Vista) and click "Uninstall a Program".
In the event you have not completed evaluating Office 2010, a fully functional 60-day trial version is available at Office.com. You can also purchase your licensed copy of Office 2010 from the same page or purchase the boxed version.
For anyone not familiar with the changes and new features in Office 2010, the "What's New" articles below will provide a helpful overview:
Whether you are new to Office 2010 or Windows 7 or have used one or both for a long time, this is your opportunity to "Ask the Experts" questions you have or get help with problems you haven't been able to solve on your own.
Please join the special live chat tomorrow when MVPs will be available to take questions about Microsoft Office 2010 or Office 2007, including Word, Excel, PowerPoint, Outlook, Access, Project, OneNote and more.
In addition to Office, you can ask questions about Windows 7 and Windows Vista. The chat will cover Windows related topics such as upgrading, setup and installation, securing your PC, Internet Explorer, and more.
Since its original release, the Windows Installer Cleanup utility has been recommended countless times to resolve installation problems. The utility removed the installation files, not the program, providing the ability to start the process over.
Unfortunately, it was found that the Windows Installer Cleanup utility was could damage some other components of the Windows operating system. As a result, Microsoft removed the Windows Installer Cleanup utility from the Download Center.
In place of the Windows Installer Cleanup utility, Microsoft now provides a Fix it Solution to fully remove Office 2003, 2007 and 2010 suites without damaging other Windows components. The Fix it for Office 2003, 2007 and 2010 is available at http://support.microsoft.com/kb/290301.
Although Major Geeks is still hosting the Windows Installer Cleanup utility, the use is at your own risk since Microsoft no longer supports the utility.
The focal point of the launch today is the worldwide availability for business customers of Microsoft Office 2010 and Microsoft SharePoint 2010. Also included in the launch event are Microsoft Visio 2010 and Microsoft Project 2010.
The products launched today are currently available in 14 languages. Over the next few months, Office 2010 and the related products will eventually be available in 94 languages. From the Press Release:
"Microsoft’s global launch website http://www.the2010event.com for the 2010 suite of products was built on Microsoft SharePoint 2010, reaching more than 60 countries and 26 languages worldwide. The site includes a rich set of content that will help customers choose and benefit from the 2010 products, which are available for business purchase now."
Whatever Office products you use most frequently, up-to-date information is readily available at the the Microsoft Team Blog resources reproduced below. In addition, help for consumers is available at Microsoft Answers in the Microsoft Office Forums.
The Microsoft Outlook team is notifying users via email about upcoming changes that will result in the inability to access email from @outlook.com, @hotmail, @live or @msn email accounts in Microsoft Outlook 2003, 2007 and 2010.
