I was in Spain helping a customer migrate their 7.1 SP1 servers to 7.1 SP2 Rollup 4, and I encountered a strange issue that I am finding, today, on my test servers as well.

The issue, as the title indicates, relates to the Security Role Manager, and was found in one (the reporting server) for my customer. I still need to create a case and send it to our backline / engineering team, but wanted to reserve the primer to Connect.

Now, to be more precise here is how I found the issue on my server (it's slightly different from the customer server - but the root is the same):

• Clone the Symantec Admin role
• Open the Security Role Manager
• Select the "Resources" view, here is what it looked like:

• Click on the pen to limit the role view on the...

2012-10-03: From news on Anthony P. blog an available release MP1 for the SP2. Reviewed 2012-10-26. Re-Reviewed 2012-11-21.

Before upgrading, you must also check this article, can change in the time and obosolete this blog a little:

http://www.symantec.com/docs/TECH197966

IT Management Suite 7.1 SP2 MP1 Release Notes

here it is: http://www.symantec.com/docs/DOC6052

and the IT Management Suite 7.1 SP2 MP1.1 Release Notes

http://www.symantec.com/docs/DOC5955

Notice: You should install the MP1.1, that is including all MP1 (do...

OK, so you need to add new Mass Storage drivers to your Windows XP sysprep image for your new HP 6470b laptop with the ""Intel(R) 7 Series/C216 Chipset Family SATA AHCI Controller", the previous model, the 6460b, having the "Intel(R) Mobile Express Chipset SATA AHCI Controller".

You download the "Intel Rapid Storage Technology Driver" SoftPaq from the HP website, run it on a temporary PC to extract the .sys and .inf files and notice that they no longer support the same storage chipsets as your previous set. Support for things like "Intel(R) ESB2 SATA AHCI Controller" seems to have been dropped. Do you care? Run this report to find out:

SELECT DISTINCT [Device ID]

FROM         dbo.Inv_HW_Plug_and_Play_Entity_Windows

WHERE     (Service LIKE N'iastor') AND ([Device ID] LIKE N'pci%')

And it will give you a list of all active Intel SATA controllers in your database:

 ...

Have you used Internet Explorer to visit a malicious website recently? Have you used Internet Explorer to visit any website lately? How do you know for sure that you are not infected? Yesterday, a new zero-day vulnerability for Internet Explorer versions 6-9 was reported affecting everything from Windows XP to Windows 7 and Windows Servers. Zero-day vulnerabilities are a common fact of life, but the same old approaches to protection continue to be insufficient. Let’s discuss this vulnerability and how privilege management can mitigate the impact.

In the case of this zero-day vulnerability, a malicious website can be crafted then unsuspecting victims can visit it with Internet Explorer only to be exploited. Once exploited, security software can be disabled, files are downloaded or malicious software is installed so that system can be reused as a zombie or SPAM relay.

Traditional endpoint...