Administering Windows Vista Security: The Big Surprises

I had been looking for a good explanation on file and registry virtualization and couldn't find anything adequate even on Microsoft's site. This book has a good explanation of it. Also, the section on BitLocker is very extensive, but unfortunately I had already pieced together information with my own research--too bad I didn't know about this book beforehand. I haven't read the entire book, but have read the sections that I was interested in. It serves as a good reference. -Martin MCSA: M

Having spoken at various Microsoft events on Windows Vista security, I have been looking for a comprehensive and deep book to recommend to IT administrators. I recently went through all of the Vista books listed in the bookstore looking for anything that called out Address Space Layout Randomization (ASLR) and Mandatory Integrity Control (MIC) in the index. Mark's book was the only one that even mentioned these topics. Upon reading the book, not only does the book call out all of these topics, but it also explains them in great detail. Additionally real world examples are provided to demonstrate the new security features that are included with Windows Vista. It is one thing to be able to discuss the features, much as the whitepapers do, it is another thing to be able to show people examples of how these features actually work within the product. Mark further goes on to probe the product for unintended uses of the security features providing insightful information as to how Windows Vista security can and cannot be used. As an example, Mark's investigation of providing ACE's based on integrity level. Overall I found this book to be the most thorough review of what has changed in the Windows Vista (and in the future Longhorn) security model. It was a great read with great examples and I highly recommend it to anyone interested in the topic.

First off, the book is written by Mark Minasi and that should tell a lot to the frequent Windows books reader. On top of that, the book is intended not only for the security experts, but also would be helpful to the variety of IT professionals. The reader will find an array of tips and instructions in addition to the in-depth coverage of BitLocker and PatchGuard technologies. This 7 chapters, 255 pages long book is truly indispensable. Here is a short list of topics covered: changes in security options, pagefile encryption, user account control, laptop security, integrity control and many more. Finally, a couple of factual jokes about Ballmer do make the book easy to read. 5 Stars!

In an era of thousand-page computer books full of unedited inaccuracies, it's a joy to find a 250-page book that provides as much help as this one does. Like many people, my first reaction to Vista's User Account Control was "MAKE IT STOP!!!" Mark's book has not only given me tools to reduce its annoyance to acceptable levels, but has convinced me that UAC is actually A Good Thing. But beyond UAC, the book gives hands-on explanation of Windows Integrity control. I must confess to never really having understood why Win2K insisted on calling access control lists 'discretionary'. Now it makes sense. Oh yes, there's coverage of BitLocker as well. And the new Event Viewer facility for phoning home ('subscription'). To me, the sign of an excellent teacher is the ability to explain complicated subject matter with uncomplicated language. Mark Minasi's writing exemplifies this art. Highly recommended.

Mark once again, is able to take technical topics and infuse humor into them at just the appropriate time. I have been running Vista since beta one, and this book is an excellent reference for those of us already familiar with the Windows operating systems: it begins with short explanations of the operating system behavior divided into segments, then it covers more of the salient, complex aspects of Vista more in-depth. I have three MCSE's and other certifications, and I have enjoyed reading Mark's books for years: my understanding always has increased while reading his books. He understands practical IT in the world, and writes from experience and with a goal to increase our understanding. In my opinion, this is an excellent book for those of us that already have a thorough understanding of IT, not just the home user.