Maximum PC Microsoft Office RSS Feed

Office 2010 Beta Already Leaked

Ryan Whitwam — Fri, 13 Nov 2009 20:42:58 -0600

Is a week just too long to wait to get your hands on the beta of Office 2010? If so, you can head on over to you friendly neighborhood torrent site and grab the code. While we don’t necessarily recommend doing this, you certainly could. Microsoft is neither confirming nor denying anything saying, “We have not officially released the beta code of Office (2010)… We recommend that people do not download code from unauthorized sources."

Microsoft is expected to officially release the Office 2010 beta at the Professional Developer Conference next week. A tech preview was released in July, but was still lacking some features and polish. The Redmond software giant is also making a bit of a departure by offering browser-based versions of Word, Excel, PowerPoint, and OneNote. So, interested?

20 Essential Tricks Every Outlook User Needs to Know

Paul Lilly — Wed, 28 Oct 2009 12:00:00 -0500

Are you stuck using Outlook at work? We feel your pain. Compared to the alternatives, like Mozilla's light-weight and customizable Thunderbird client, Outlook is slow, bloaty, and downright unwieldy. Add to the fact that it isn't free and Outlook doesn't appear to have much going for it.

But whether you use Outlook because you have to or have grown accustomed to its interface and are reluctant to switch (or maybe you just want to justify the cost of Microsoft Office), we have some tricks to help you manage your email and contacts like a pro. After all, if you're going to use Outlook, no matter what the reason, you might as well get the most out of it, and we're here to help you do just that.

Live on the Edge: Access Blocked Attachments

When it comes to security, we don't condone throwing caution to the wind, and so we're content to let Outlook block file types it deems potentially harmful. But maybe you have a legitimate reason for wanting to receive .txt and .exe file attachments, or maybe you'd rather rely on your own good sense rather than let Outlook make that judgment call for you. No matter what the reason, you can configure Outlook to let through any file types you specify, just be warned that by doing so, you're also making it a little easier for malware writers to gain access to your machine. if you're okay with that, then keep reading.

You'll need to dip inside your system's registry, so if you're running Vista or Windows 7, bring up the Start menu and type Regedit. XP users can get there by going to Start>Run and typing in Regedit.

Navigate to HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security if you're using Outlook 2007. Outlook 2003 and 2002 users will navigate to the same general location, but instead of 12.0, change the folder to 11.0 and 10.0, respectively.

In the right-hand pane, right-click and select New>String value and name it Level1Remove. Finally, double-click the new string and in the Value data field, enter the file extensions you wish to allow, separating the entries by a semicolon.

For the change(s) to take effect, you'll need to close and re-launch Outlook. Once you do, you'll be able to receive whatever types of file attachments you indicated above. Just be warned that you're now more susceptible to malware, so be absolutely certain the file you're downloading is legit. It also doesn't hurt to scan any downloads with your antivirus program.

Integrate Your Twitter Account

One of the great things about Twitter from a usability standpoint is its ability to be updated from a multitude of sources, and Outlook is no exception. The integration comes courtesy of TwInbox (formerly known as OutTwit), which allows you keep your followers in the loop, 140 characters at a time.

To use it, download the free plug-in here and install it. The next time you fire up Outlook, you'll see the TwInbox toolbar added to your client. Click on the TwInbox pulldown menu and select options, then enter in your Twitter account credentials.

Before hitting the OK button, be sure to configure the other tabs as well. Under the Receiving tab, for example, you can setup TwInbox to place incoming Twitter messages in whatever folder you want, as well as assign color categories to new messages. If you're a heavy Twitter user, you may want to have TwInbox fetch new messages every minute -- the shortest interval available -- or once every hour if you're a casual user. You can also have TwInbox automatically shorten URLs with TinyURL, though we'd prefer if the service used bit.ly instead.

When you're ready to post a new update, just punch the New button and type in your message (you can add pics this way too). In the upper-right corner, you'll see how many characters you have remaining. Pretty slick, eh?

Archive Old Mail on Your Own Terms

Every once in awhile, Outlook will offer to auto-archive your old email items, but if you take the time to do this yourself, you can keep those old files infinitely more organized than Outlook is able to do on its own.

But why even archive email in the first place? If you don't, Outlook's Personal Folders (PST) file will continue to expand, kind of like Jabba the Hutt left unattended at an all-you-can-eat buffet. As the PST file grows in size, Outlook may start to feel sluggish. The rate at which this happens depends on your emailing habits, but whether your a light or heavy email user, at some point, Outlook will lose its initial pep.

Your best course of action is to setup an annual or bi-annual archive. Or if you're a regular chatty Cathy, a monthly archive may better suit you. No matter what the interval, the basic steps will be the same. To get started, click on File and select Data File Management. Next, click on the Add button and choose the desired format (stick with the default if using Outlook 2007). Click OK and give your archive a name, like '2008' or 'Jan-June _2008.' For that warm fuzzy feeling, go ahead and password protect your new archive when prompted.

You should now see two entries in the Data File Management window. Go ahead and close the window because we're now ready to start archiving items to our newly created PST file. One way to do this is by dragging and dropping individual mail items to the newly created entry under Mail Folders. Depending on much email you need to move, this can take a long time.

A better way to move old files is by navigating to File>Archive. Check the 'Archive this folder and all subfolders' radio button if it isn't already. Next, highlight the folder you want to archive (or your entire Inbox), specify the appropriate date in the 'Archive items older than' pulldown menu, and click the browse button to select your newly created archive file and punch OK.

Houston, we have a problem! You followed the above steps, but your original PST file (which you can find by navigating to C:\Users\[username]\AppData\Local\Microsoft\Outlook) is just as large now as it was before you archived all your email. What the flip?

This isn't cause for concern, it just means Outlook's automatic background compaction hasn't kicked in yet. Part of what this does is reclaim the empty space in your PST file and give it back to your hard drive. But if you don't feel like waiting, or if you have waited and there's still no change, you can tell Outlook to get to work. Just go back in the Data File Management window, double-click the PST file, and select Compact Now. Once again, be patient, because depending on the initial file size, this could take awhile.

Securely Sign Your Emails with a Digital ID

It's not at all difficult for hackers to impersonate you by spoofing your email address and sending out emails that appear to come from you. Luckily, there's something you can do about it to give your recipients some peace of mind that, hey, this email is the real deal. To do that, you need a Digital ID.

You can think of a Digital ID as sort of an electronic driver's license. The digital certificate, which is verified by a trusted third party, tells the recipient that you are who you claim to be. Anyone can get one, and to get yours, navigate to Tools>Trust Center. Highlight Email Security in the left-hand column and then click the 'Get a Digital ID' button.

This brings up the Digital ID page on Microsoft's Office Marketplace website, which can be a little overwhelming. You can research the available options on your own, or follow our lead and head straight over to InstantSSL by Comodo. It's free, while most of the alternatives are not.

After filling out the online form, you'll receive a verification email (ours showed up almost instantly) alerting you that your digital signature is ready for collection. Click the included hyperlink to download and install the certificate.

Now we need to import the certificate into Outlook, but the steps will be slightly different depending on which browser you used to retrieve it. Firefox users will navigate to Tools>Options>Advanced and bring up the Encryption tab. Click on the View Certificates button, highlight your certificate, and click the Backup button to save it to your hard drive. If you're an IE user, click on Tools>Internet Options and bring up the Content tab. Click on the Certificates button, then press Export and follow the prompts.

To import your certificate into Outlook, fire up your email client and navigate back to Tools>Trust Center>Email Security. Click the Import/Export button, then punch the Browse button to locate the certificate on your hard drive. Fill in the appropriate fields and you'll all finished!

If you want Outlook to use your digital ID every time you send out an email, navigate once again to Tools>Trust Center>Email Security and click the 'Add digital signature to outgoing messages' check box. This can slow things down, so you may opt to only digitally sign emails when the need arises, such as firing off an important email to your boss or co-conspirator for world domination. To manually add a digital ID on an as-needed basis, click on Options in the email you're composing. Expand the More Options section on the right-hand side, mash the Security Settings button, then check the 'Add digital signature to this message.' When you fire off the email, the recipient can check the digital ID and verify that it really came from you!

Configure Sent Messages to Automatically 'Reply to All'

Maybe you're coaching junior's basketball team and you're trying to organize a fundraiser with all the parents. Or perhaps you're attempting to carry on a group conversation with your co-workers on an important project. These are just a couple of scenarios in which it's helpful if the recipients remember to hit 'Reply to All' when responding to emails, but there's always one knucklehead who doesn't follow protocol. It's not that he's trying to be difficult, he just hit the wrong button.

You can prevent this from happening by forcing all replies to reach every recipient. Here's what you need to do. Compose a new email message, but before sending it on its way, click the Options button. In the toolbar, you'll see a button that says 'Direct Replies To' (Outlook 2007). Click on it.

Check the 'Have replies sent to' check box and then mash the Select Names button. Select the names from your Address book, or enter them in manually in the Reply To field at the bottom.

As a point of good etiquette, you should let the recipients know that you've configured email replies be sent to the entire group, even though this should be obvious when they click the Reply button. This will prevent Bob from revealing potentially embarrassing tidbits about his date with Sally to the entire group when he thinks he's only communicating with you!

Create a Custom View

You'll spend hours tweaking your system's settings in the BIOS, even if you spend most of your time surfing the web. And the same holds true when it comes to finding the best overclocking settings for your GPU, even if the end result only nets you a few extra frames per second in your favorite shooter. So why not spend a little time customizing Outlook? After all, assuming you keep the client running all day, you'll log a considerable amount of time staring at its unwieldy interface during any given work week.

To begin molding Outlook's UI to better suit your style, click on View>Current View>Define Views. In the pop-up that appears, press New to create a new view and give it a name. This is also where you'll choose your template (Table, Timeline, Card, Business Card, Day/Week/Month, Icon) depending on what you're trying to customize. You can use any template you want, but if you're customizing your mail window, you'll probably want to stick with the Table template unless you're shooting for a funky layout.

The next order of business is to arrange the layout by different categories. These are pretty self-explanatory. In the Fields section, for example, you'll see a list of available fields you can add to your view (as well as remove them) with the click of a button. You can also arrange in what order these fields are shown.

One particularly interesting section is the Filter field. This can come in especially handy if, say, you're on vacation and want to avoid the temptation to check work emails and be reminded of everything that awaits you after you return from the Bahamas. You can setup filters so that only email sent to your personal address shows up in the inbox, while email to your work addy stays hidden.

Another field you may want to pay attention to is Automatic Formatting. It's in here where you can customize the appearance of certain messages where you're listed as a recipient, but in the CC or BCC fields. If you tend to be copied on a lot of emal that's usually of low interest to you, use this field to divert your attention to emails that are more likely in need of your attention.

You won't find the option by default, so press the Add button, which brings up an untitled check box. Give it a name, such as 'To Me' or 'Not Copied.' To make these emails stand out from the rest, click the Font button and change the color.

Next, click the Condition button, which brings up another pop-up window. Check the 'Where I am' check box and choose 'the only person on the To line' in the accompanying pull-down menu.

Backup, Transfer, and Manage Your AutoComplete List

Over time, Outlook becomes pretty adept at predicting who it is you're trying to email and can usually accurately guess the recipient based on a single keystroke. This saves a ton of time, particularly if one of your frequent contacts has a long and convoluted email addy and you'd rather not poke around your address book. But there's a problem. As power users, we frequently find ourselves upgrading hardware and reinstalling Windows, which means the entire learning process starts anew. Or does it?

Whether dealing with a fresh Windows install or transferring your Outlook DNA to another machine, you can bring your auto-complete info along for the ride, but you won't find it in your PST file. Instead, this info lays hidden in a separate NK2 file.

To find it, you first need to close Outlook. Once you do that, navigate to C:\Users\[username]\AppData\Roaming\Outlook. If you're having trouble locating the directory, check to see that you've allowed Windows to show hidden files and folders (Control Panel>Appearance and Personalization and click on 'Show hidden files and folders' under Folder Options). Alternately, bring up the Start menu and type %APPDATA%\Microsoft\Outlook (Start>Run if you're using XP).

Once you've located the NK2 file, simply copy it over to a USB key and then transfer it to the same directory on the destination PC or when you reinstall Windows!

Of course, Outlook doesn't always correctly guess who you're trying to email, and that can be frustrating when you're in a hurry. Not only that, but should one of your contacts switch email addresses or drop off the face of the earth, you'll want to delete their AutoComplete info. Unfortunately, the only way to do that is to begin typing their name and when it appears, press the down arrow to highlight the entry and the DEL key to nuke it. This can be time consuming if you have a lot of contacts to update, and Outlook doesn't allow you to edit the NK2 file. Luckily, there's someone who does

Nir Sofer's lightweight N2KView executable, which you can download here, displays the email records stored in Outlooks AutoComplete file. Just fire up the app, then proceed to delete any AutoComplete entries that are outdated. You can also use this handy utility to add items from your Address Book, and as an alternative way to backup and restore Outlook's AutoComplete file. You'll find all these options in the File menu.

Intercept Sent Emails!

Image Credit: masternewmedia.org

After composing that long winded email to your boss letting him know exactly where he can stick that Jelly-of-the-Month Club membership you received instead of a Christmas bonus, you probably felt better, right up until you accidentally hit the Send button out of habit. Or maybe you sent sensitive information to the wrong contact and realized it a second too late. There are several scenarios in which you might wish Outlook had an Unsend button -- such as noticing a typo after the fact -- but that's just not how the Internet works.

That doesn't mean you're completely out of luck, however. You've probably heard the saying, 'An ounce of prevention is worth a pound of cure,' and in this case, we're going to show you how to prevent scenarios like the above using Outlook's Defer rule.

Outlook's Defer rule places a temporary hold on all outgoing messages, so while you still can't unsend email that's already been thrust into the Internet, this will give you a short window to backtrack when you're not having one of your better days. To get started, click on Tools>Rules and Alerts.

Next, click on New Rule... to bring up the Rules Wizard window and highlight 'check messages after sending,' and then click on Next. This will bring up the Conditions window, which is where you'll indicate when you want this rule to take effect. Ignore all the check boxes and just click on Next if you want to defer all sent messages, otherwise go ahead and specify under what conditions you want your sent mail to have a temporary hold.

You should now be at the 'Select action' window, which is pretty self explanatory. Mark the very last check box that reads 'defer delivery by a number of minutes.' At the bottom under Step 2, click the hyperlink to bring up the Deferred Delivery window, and then change the number of deferred minutes to however long you want (we recommend anywhere from 3-5 minutes).

Click Next to setup any exceptions, such as when emails are marked as "importance" or several other options. Hit Next one more time, give your rule a name, and press the Finish button. Now the next time you goof up when sending an email, you can nuke the message from your Outbox and pretend the whole thing never happened!

Bug the Crap Out of Co-Workers With Polls

We'll assume you have a legitimate reason for wanting to send your fellow workers a poll, and just so we're clear, spamming the office with asinine questions is not a good reason. But let's say you've been put in charge of narrowing down a group gift for Harold's upcoming retirement, or are trying to decide which watering hole you and your co-workers are going to meet up at after work. So long as all the recipients are using Outlook, you can do this.

At this point, you might be thinking 'Wouldn't it make more sense to just ask everyone to respond rather than bother with a poll?' It would be if you're dealing with a small group of people, but the more people you're trying to ping, the harder it becomes to keep track of everyone's response. In this case, a poll can save you a ton of time.

To include a poll in your email, compose your message, click the Options tab, and mark the 'Use voting buttons' check box. In the pulldown menu directly to the right of the check box, you can change the answers from Approve/Reject, Yes/No, or Yes/No/Maybe. If none of these float your boat, type in your own responses separated by a semicolon.

Fire off your email and wait for the responses to start rolling in. Those who were included in the mailing list will be instructed to "Vote by clicking Vote in the Respond group above."

When they do, they'll have the option of sending in their response now or editing before sending. Once you start receiving replies, you can check the status either by opening up your original sent message and clicking on the Tracking button, or click on the blue bar in any of the emails you received and select 'View voting responses.'

Level Up Your LinkedIn Connections

We're typically not huge on toolbars, but if you're active on LinkedIn -- or just getting started and want to expand your network -- the LinkedIn toobar can come in pretty handy. During setup, this plug-in will spend a few moments combing through your entire collection of email. It does this in order to make suggestions on who to invite to your network based on how frequently you exchange emails with a particular contact.

But making suggestions isn't all it's good for. You can also receive updates when contacts change their LinkedIn profiles, update your Outlook contacts to match their LinkedIn profile, and use the included Dashboard as a front-end to more easily manage your network. Groovy!

Never Forget an Attachment Again!

If you end up using this plug-in only once, it will have been worth the download. What's it do? Not much - it just slaps you across the face (gently) when it thinks you may have forgotten to include an attachment so you can avoid having to resend a follow-up email.

There's no voodoo magic going on here, the plug-in simply sifts through your email looking for words that are most often used when an attachment is supposed to be included. If no attachment exists, a pop-up dialog asks if you meant to add one after you've already mashed the Send button. If you did, just hit 'Yes' and get an instant do-over. And if it ends up being a false positive, click 'No' and move one with your day.

On the downside, the developer doesn't say which words are flagged, nor can you can add words of your own. Nevertheless, it works well out of the box and could potentially save you from a boneheaded moment.

Stay Connected to Facebook

Like TwInbox, FBLook integrates social networking into Outlook, only this one works with Facebook, not Twitter. This one's especially handy for those times when you want to quickly update your Facebook status without loading up your profile and getting distracted with what everyone else is up to. You may have meant to hop in and out, but before you know it, you're surfing profiles, deciding who to invite, and getting sucked into another round of Mafia Wars.

Or you can install FBLook. Just jot down your status in the toolbar, hit return, and get back to work. Or kill a little bit of extra time sifting through new friend requests, messages, birthday reminders, and other notifications.

Supercharge Your Contacts List with Xobni

Xobni is one of those plug-ins where, once you use it, you'll wonder how you ever got along without it. Once installed, you'll be able to search through your contacts faster than was otherwise possible, but that's only the beginning. Xobni maintains a complete profile of everyone you know, including contact info, profile pictures, recent conversations (threaded!), files exchanged, and so much more.

There's also a strong social networking element to Xobni. Twitter, Facebook, and LinkedIn all come integrated so you can see which sites your contacts participate in. Does Bob use Twitter? Click his name and find out, then check out his latest tweets, all from within Outlook!

We also appreciate the seamless integration into Outlook's interface. There's a lot going on, and Xobni organizes it all in a convenient sidebar that wedges right into the email client. Should you decide you don't want to look at it, just click the arrow to tuck the sidebar away. How considerate!

Send Attachments the Polite Way

Nobody likes receiving mega-sized attachments in their inbox. The messages take a long time to be delivered, and if you included important information in the body of the email, you put the recipient in the unenviable position of having to save the bloated email -- attachment and all -- even after they'd downloaded the file.

There's a better way, and you've probably already heard of youSendIt. But did you know it also comes as an Outlook plug-in? It does, and your contacts will thank you for using it. You can configure YouSendIt to intercept all file attachments and route them through their servers, or just files exceeding a pre-set size limit. You can even use the service with a proxy.

By routing your attachments through YouSend it, the recipient receives a link to download everything you sent, so suddenly that would-be 10MB email message is now a much more manageable 25KB. And your co-workers will stop dreading the thought of you sending another email.

5 More Quick and Easy Tips

There are several things you can do to improve Outlook, and many of them are just a few mouse clicks away. Here's a collection of some of our favorite, easy to apply tips.

Save Multiple Attachments

Don't bother saving multiple attachments one file at a time, and instead round them all up in one fell swoop. Outlook doesn't make this functionality obvious, but it's still pretty easy - just click on Other Actions in the Actions menu and choose Save Attachments.

Supercharge Outlook by Disabling Unused Add-ins

You shouldn't have too much trouble running Outlook on modern hardware, but if you're still stuck several generations behind, you may find yourself spending too much time waiting on Outlook to do its thing. While we can't turn the email client into a lean, mean, sending and receiving machine, we can give Outlook a little boost by disabling add-ins that we'll never use.

To do this, click on Tools>Trust Center>Add-ins. At the bottom of the window you'll see a Go button next to COM Add-ins. Press it and then uncheck any add-ins you're not using. If you're not sure what one of them does, hit up Google or Bing. If Outlook just recently started slowing to a crawl, you can disable add-ins one at a time to see if performance improves, and if it does, you've found the culprit!

Minimize Outlook to the System Tray

If you keep Outlook running all day -- and if it's you're main email client, then you probably do -- it's just taking up space in the Taskbar. To fix this in older versions of Outlook, you'd need to poke around the registry and add a DWORD value, but that's not the case anymore. In Outlook 2007, simply right-click the Outlook icon in the System Tray and check 'Hide when Minimized.' How easy was that!?

Create a Custom Distribution List

Setting up a mailing list in Outlook is a piece of cake once you know where to look. To set one up, select File>New>Distribution List, or hold CTRL+Shift+L. Give your list a name, and then start adding contacts by clicking on Select Members or Add New.

Filter Mail from Specific Senders to Their Own Folder

Work and play rarely mix, but the problem with Outlook is that it meshes everything into one, whether you want it to or not. You may have separate email accounts setup, but all incoming email still gets clumped into the same inbox. If you don't want your significant other's emails mingling with your work mail, you can setup a special folder for that special someone.

To do this, right-click an email from whoever it is you want to have their own folder and select 'Create Rule.' Check the check box next to the sender's name as well as the 'Move the item to folder' check box, and then click on Select Folder. Pick or create a folder, and if you want, you can even assign a WAV file, just to be sure to check 'Play a selected sound' if you do.

Microsoft Plans to Inundate New PCs with Ads-ridden Office 2010 Starter Edition

Ryan Whitwam — Thu, 08 Oct 2009 21:18:26 -0500

If you buy a Windows 7 PC in the future, you might not be getting that copy of Microsoft Works nobody uses. Instead it will come with a completely free version of Office 2010. Oh… Office 2010 Starter Edition, that is. It will be a limited functionality version of Office supported by Ads. The nature of the ads was not made clear.

According to Microsoft, the Office Starter Edition will have, “a simple path to upgrade to a fully featured version of Office 2010 directly from within the product.” This is probably an effort to get customers used to Office features in the hopes that they will purchase the full version. Microsoft will have to walk a fine line to make the ads annoying enough that people will want to get rid of them, but not so annoying that they don’t even use Office.

The new PCs will already have the full version of Office 2010 installed on the hard drive. Customers will simply have to purchase a card from a retailer with the unlock code. The card will apparently be sold through some “major electronic retail outlets”. Microsoft hasn’t detailed which OEMs would be installing the Office Starter Edition software. Try to contain yourself waiting for this one.

Microsoft Offers a Glimpse at the Future of Office

Paul Lilly — Thu, 08 Oct 2009 09:02:38 -0500

Your grandkids - if you don't already have them -- will one day wonder how you ever got along without motion sensor cameras and voice recognition microphones in your home office. That's assuming Microsoft's vision of a futuristic office ever comes to fruition.

In a YouTube video, Microsoft Research shows off a prototype for a next-gen office environment, which is largely built around Microsoft Surface technology. Neat tricks abound, such as holding up a document against a giant, wall-mounted Surface where it's instantly scanned and able to be pinned, but that's just the beginning.

You really have to check out the video, and we dare you not to make any comparisons to Minority Report.

Video Link

Microsoft Threatens to Stop Selling Microsoft Office over Word Ban

Pulkit Chandna — Fri, 21 Aug 2009 08:28:04 -0500

Upholding i4i’s patent infringement claim against Microsoft, a US Federal court judge placed an injunction on Microsoft Word on August 11, 2009. Judge Leonard Davis ordered that Microsoft pay the Canadian company i4i $290 million in damages and stop the sale of Word in the US, within 60 days of the pronouncement of the order, until the dispute is fully resolved. Microsoft Word’s default file format Office Open XML is at the epicenter of Microsoft’s dispute with i4i. The XML-based file format infringes i4i’s US patent number 5787449.

On Tuesday, Microsoft filed an appeal against the injunction. It is seeking a stay on the injunction, which it believes could cause "irreparable harm.” It has warned that the ban could force it to stop the sale of Microsoft Office for many months to come.

“Microsoft and its distributors face the imminent possibility of a massive disruption in their sales. If left undisturbed, the district court’s injunction will inflict irreparable harm on Microsoft by potentially keeping the centerpiece of its product line out of the market for months. The injunction would block not only the distribution of Word, but also of the entire Office suite, which contains Word and other popular programs," the company’s filing reads. Although Microsoft can take corrective steps by disabling the XML feature, it will have to cough up a lot of money for that exercise.

Image Credit: Cleveland

A Patch Tuesday "Two-Fer" Secures Both Microsoft and Adobe Programs

Mark Edward Soper — Thu, 11 Jun 2009 19:11:41 -0500

June 9th saw a rare 'double-header' in security updates: Microsoft's monthly Patch Tuesday was joined by Adobe's quarterly security updates for Acrobat and Adobe Reader. How big was this month's 10-update Patch Tuesday? According to a Microsoft spokesperson quoted by Cnet, the 31 vulnerabilities covered by updates are "the most since Microsoft started releasing updates on a regular schedule of the second Tuesday of every month in October 2003."

Here's what Microsoft patched this week:

Critical remote code execution vulnerabilities in Active Directory on Windows 2000 Server, Windows Server 2003, and ADAM on Windows Server 2003 and Windows XP Professional (MS09-018)

Critical to Moderate remote code execution vulnerabilities in Windows Print Spooler in Windows 2000 SP4, Windows XP SP2/SP3 and x64, Windows Server 2003 SP2 and x64 SP2, Windows Vista RTM/SP1/SP2 and x64 and Windows Server 2008 RTM/SP2 (MS09-022).

Critical to Moderate remote code execution vulnerabilities in IE5.01, IE6, IE 6SP1, IE7, and IE8. Note that IE8 in Windows 7 RC is not included (MS09-019).

Critical to Important remote code execution vulnerabilities in Microsoft Office Word 2000, 2002 (XP), 2003, and 2007 for Windows; 2004 and 2008 for Mac, Open XML converter for Mac; Microsoft Office Word Viewers and Compatibility Packs for 2007 file formats SP1 and SP2 (MS09-027).

Critical to Important remote code execution vulnerabilities in Microsoft Office Excel 2000, 2002 (XP), 2003, and 2007 for Windows; 2004 and 2008 for Mac, Open XML converter for Mac; Microsoft Office Excel Viewers and Compatibility Packs for 2007 file formats SP1 and SP2 (MS09-021).

Critical to important remote code execution vulnerabilities for Microsoft Works 8.5, 9 and Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2007 SP1 (MS09-024).

Important elevation of privilege vulnerabilities in the RPC function in Windows 2000 SP4, Windows XP SP2/SP3 and x64, Windows Server 2003 SP2 and x64 SP2, Windows Vista RTM/SP1/SP2 and x64 and Windows Server 2008 RTM/SP2 (MS09-026).

Important elevation of privilege vulnerabilities in Windows Kernel in Windows 2000 SP4, Windows XP SP2/SP3, Windows Server 2003 SP2 and x64 SP2, Windows Vista RTM/SP1/SP2 and x64 and Windows Server 2008 RTM/SP2 (MS09-025).

Important elevation of privilege vulnerabilities in IIS 5.0, 5.1, and 6.0 when running on Windows 2000 SP4, Windows XP SP2/SP3 and x64 SP2, and Windows Server 2003 SP2 and x64 SP2 (MS09-020).

Moderate information disclosure vulnerabilities in Windows Search 4.0 when running on Windows XP SP2, SP3, x64 SP2; Windows Server 2003 SP2 and x64 SP2 only (MS09-023).

For details about the exploitability rating for each vulnerability (1-3, 1 being the most severe), see the security bulletin summary. To find out about Windows Media Center and other updates, and where to get the Adobe updates, join us on page 2.

Microsoft also rolled out these updates in June:

The June 2009 version of the Windows Malicious Software Removal Tool (KB890830)
The June 2009 update for the Windows Mail Junk email filter (KB905866)
Cumulative updates for Windows Media Center for Windows Vista (KB967632) and Windows Media Center TV Pack for Windows Vista (KB966315)
An update to the ActiveX kill bits security pack (KB969898).

Adobe was also busy sticking its fingers in the security dike this month, rolling out critical security update APSB09-07 with updates for Adobe Reader and Acrobat 9.x, 8.x, and 7.x. Vulnerabilities patched by the updates include stack overflow, integer overflow, memory corruption and heap overflow, all of which could be used to trigger arbitrary code execution.

Stay safe out there!

Threat Update: Spam and Phishing Out, Trojans and Scareware In

Mark Edward Soper — Thu, 09 Apr 2009 18:20:42 -0500

If you've been worrying about computer security for awhile, you might remember when macro viruses in Microsoft Word and Excel files were at the top of the exploit list. These file formats, along with the omnipresent Adobe Reader PDF format, are once again among the biggest threat vectors being exploited by today's malware, according to a new report from the Microsoft Malware Protection Center. Fittingly, the full report and a condensed key findings version are available in either PDF or Microsoft's own XPS formats. These reports cover the July-December 2008 period.

Some key findings include:

Scareware (which Microsoft calls "rogue security software") is on the rise, including the latest versions of our old friend Antivirus XP.
A slight reduction in unique vulnerability disclosures from 2007, but the High (most serious) category was larger in the second half of 2008 than in the first half of the year or the second half of 2007.
Applications continue to be the biggest target (86.7%, with browsers at 8.8%, and operating systems at only 4.5%)
The second half of 2008 saw a big rise in Microsoft security bulletins: over 67% more than in the first half of the year.
US English and Chinese-language browsers were the chief targets of browser-based exploits, accounting for almost 60% of all attacks.
Microsoft-based vulnerabilities accounting for more than 40% of browser-based attacks on systems running Windows XP, but less than 6% on systems running Windows Vista.
Ironically, the most frequently exploited vulnerabilities in Microsoft Office have been patched since 2006, but were targets mainly because up-to-date service packs were not installed.
Adobe PDF-based attacks rose sharply in the second half of 2008, but the attacks cited in the survey are blocked by the current versions of affected products.
Despite the rise in software-borne attacks, lost and stolen equipment continues to be the biggest security risk, amounting to 50% of the incidents listed in the OSF Data Loss Database.
The US, Canada, Europe and Russia continue to lead the world in phishing sites.
Miscellaneous Trojans, followed by Trojan downloaders and droppers are the two most common threat types detected and removed by Microsoft's Windows Live One Care and Forefront Client Security apps in the second half of 2008.
By contrast, older threats such as backdoors, viruses, exploits, and spyware are significantly less of a threat than in 2006 and 2007.

What have you found to be the biggest security threats you face in the office - and at home? Hit Comment and share your security war stories.

Windows 7 Spills the Beans on Office 14's 64-bit Support

Mark Edward Soper — Mon, 23 Mar 2009 16:27:01 -0500

Step one on the long road to retiring 32-bit computers to the PC graveyard was the development of 64-bit processors (check). Step two was the development of 64-bit operating systems (check). Step three was the development of 64-bit drivers (check). And now, it's almost time for step four: major 64-bit applications.

ZDNet's Ed Bott has done some digging around in Windows 7's MigWiz.xml file (it's used to configure the Migration Wizard in Windows 7) and discovered that the upcoming Microsoft Office 14 will be available in both 32-bit and 64-bit versions. In the Office 14 section of MigWiz.xml in post-beta builds of Windows 7, Bott found references to both standard and x64 programs in Office 14, as well as references to upgrade options from Office 2003 to either Office 14 or Office 14 x64 (note that the public Windows 7 beta doesn't include these settings). What does this mean to Office 14's expected release date? Bott says:

The fact that this code is being baked into Windows 7 now suggests that the rumors of an early 2010 ship date for Office 14 are accurate. Having native 64-bit support for all members of the Office family is an extra bonus and welcome news.

If you're currently using some version of Microsoft Office, does the advent of a native 64-bit version make you more likely to upgrade to Windows 7 and Microsoft Office 14? Hit Comment and let us know your thoughts.