How to access Compliance Manager by Office 365

Compliance Manager is now available

Compliance Manager is a cross-Microsoft-cloud services feature designed to help organizations meet complex compliance obligations, including GDPR, ISO 27001, ISO 27018, NIST 800-53, and HIPAA. Compliance Manger is rolling out and has been moved from Public Preview to General Availability.

How to access Compliance Manager?

Users can access Compliance Manager by signing into their Office 365, Dynamics 365, or Azure user account via the Service Trust Portal. This new compliance solution is designed to help organizations meet their data protection and regulatory requirements while using Microsoft cloud services. Compliance Manager enables users to perform on-going risk assessments, gain actionable insights to improve data protection capabilities, and simplifies compliance processes through its built-in control management and audit-ready reporting tools.

Compliance Manager is now generally available for Azure, Dynamics 365, and Office 365 Business and Enterprise subscribers in public clouds. Note that Office 365 GCC customers can access Compliance Manager, however, you should evaluate whether to use the document upload feature of compliance manager, as the storage for document upload is currently compliant with Office 365 Tier C only.

What do I need to do to prepare for this change?

By default, everyone in your organization with an Office 365, Dynamics 365 or Azure user account has access to Compliance Manager and can perform any action in Compliance Manager. To change the default permissions, at least one user must be added to each Compliance Manager role (see the instructions on our support page linked from Additional Information below). After a user is added to a role, the default permissions are removed and only users that have been added to a role will be able to access Compliance Manager and perform the actions allowed by that role.

Once you log into Compliance Manager you will see a number of assessments and what Microsoft has completed for the various assessments.  You will also see what controls your organization are responsible for.  You can export the assessment to excel if you need to provide it for an auditor or wish to save it for retention purposes.

Once in an assessment, you can update what your organization is doing to meet the requirements for the various supported standards.  This gives you the ability to track your compliance activities.  Some organization may already have GRC tracking software but they will find this tool useful if for no other reason to see the results of Microsoft Managed controls.

If Microsoft allowed you to have an assessment for your on-premises systems.  Like a blank questionnaire, clients could use it might be able to replace a GRC app for some companies.

When updating the Customer Managed Controls you have the ability to upload documents, lookup the related controls, assign an assessor, a test date and document the test results.

Microsoft provides you with detailed guidance for customer actions and allows you to document your control implementation details along with a test plan and any response to the assessment.

There is a Compliance Score that, “is a new intelligent scoring feature that is calculated based on an analysis of industry standard control components. Compliance Manager analyzes controls for their the impact to the confidentiality, availability, and integrity of protected data, as well as external drivers in order to weigh controls based on their impact.”

We think this is a great tool especially for small to medium businesses and local governments.  Most often these smaller organizations don’t have formal governance practices or necessary skills in-house.  This tool could help them develop those processes. We also see this as a great tool or internal auditors to use. It gives businesses a place to document the testing methods and results.

 

What You Need to Know About the Big Chip Security Problem

According to Intel Corp.,most of the processors running the world’s computers and smartphones have a feature that makes them susceptible to hacker attacks. The chipmaker, working with partners and rivals, says it has already issued updates to protect most processor products introduced in the past five years, but the news sparked concern about this fundamental building block of the internet, PCs and corporate networks.

The revelation of the so-called Meltdown and Spectre vulnerabilities spurred a scramble among technology’s biggest players, from Apple Inc. to Amazon.com Inc., to enact fixes and reassure customers they were on top of the problem.

1. What’s the problem?

Modern processors guess what they’ll have to do next and fetch the data they think they’ll need. That makes everything from supercomputers to smartphones operate very fast. Unfortunately, as Google researchers discovered, it also provides a way for bad actors to read data stored in memory that had been thought to be secure. In a worst-case scenario, that would let someone access your passwords.

2. How bad is it?

The vulnerability won’t stop your computer working and doesn’t provide an avenue for hackers to put malicious software on your machine. Though it could put important data at risk, there’s been no report so far of anyone’s computer being attacked in this manner. More broadly, though, the new fears could undermine longtime assurances that hardware and chip-level security is more tamper-proof than software.

3. How was it discovered?

The weakness was discovered last year by folks Google employs to find such issues before the bad guys do. Usually, solutions are developed in private and announced in a coordinated way. This time the news leaked before the companies involved had a chance to get a fix in place.

 

 

4. What’s being done to fix it?

Chipmakers and operating system providers, such as Alphabet Inc.’s Google and Microsoft Corp., are rushing to create software patches that will close the potential window of attack. Intel said that it expects to have issued updates for more than 90 percent of recently introduced processor products. Amazon.com Inc. said “all but a small single-digit percentage” of its servers have already been protected. In a blog post, Google said its security teams immediately “mobilized to defend” its systems and user data. Some customers of Android devices, Google Chromebook laptops and its cloud services still need to take steps to patch security holes, the company said. Patches for Windows devices are out now and the company is securing its cloud services, Microsoft said in a statement.

5. Is this just an Intel problem?

No, though that seems to be what panicky investors initially thought. Intel says it’s an issue for all modern processors. But rival Advanced Micro Devices Inc. stated that its products are at “near-zero risk.” ARM Holdings, which has chip designs that support all smartphones, said that, at worst, the vulnerability could “result in small pieces of data being accessed” and advised users of its technology to keep their software up to date. Google fingered all three companies. Apple said all Mac computers and iOS devices — including iPhones and iPads — were affected, but stressed there were no known exploits impacting users and that steps taken to address the issue haven’t dented performance.

6. What will the fallout be?

Some computers, mostly older ones, could be slowed down by the software patches that will make them more secure. Intel said that in common situations software might be slowed down by as much as 3 percent or not at all. But in other rare situations, performance might be reduced as much as 30 percent. The company doesn’t expect any financial impact and said it thinks customers will keep buying. As the fixes haven’t been widely deployed yet, it’s unclear whether anyone will even notice or whether computer slowdowns will be widespread. Intel has only done lab tests.

Microsoft finally retired Windows 10 1511

 

The company also ended support for 1607 to users of Windows 10 Home and Pro.

Microsoft finally retired a 2015 version of Windows 10, marking 29 months of support for the untitled feature upgrade, nearly as long a stretch as the time between the releases of Windows 8 and Windows 10.

Windows 10 1511 – Microsoft labels its feature upgrades in a yymm format – received a final set of security patches on April 10.

The retirement date had originally been slated for Oct. 10, 2017, but last November Microsoft extended it an additional six months, albeit only for commercial customers. “To help some early enterprise adopters that are still finishing their transition to Windows as a service, we will be providing a supplemental servicing package for Windows 10, version 1511, for an additional six months, until April 2018,” Michael Niehaus, at the time a director of product marketing for Windows, said in a 2017 post to a company blog.

Customers running Windows 10 Enterprise or Windows 10 Education were given the support reprieve; those operating lesser SKUs (stock-keeping units), including Windows 10 Home and Windows 10 Pro, had their support curtailed last October.

Earlier this year, Microsoft added six months of support to all versions of Enterprise and Education, raising the support roof from 18 months to 24 for not only 1511, but also for 1607, 1703 and 1709. The less expensive, less expansive, Home and Pro, however, retained the 18-month support timeline.

Also destined for an April 10 retirement party was Windows 10 1607, the mid-2016 feature upgrade that received its last security patches that day on Windows 10 Home and Windows 10 Pro. Meanwhile, version 1607 on Enterprise and Education will continue receiving fixes until Oct. 9.

Windows 10’s bifurcated support timelines – 18 months for some SKUs, 24 months for others – complicate what had been an easy-to-understand practice of patching versions for a year and a half. Period.

Microsoft has tried to inform customers of the support due them by reminding them in January’s and February’s cumulative updates that patches end for Enterprise and Education, version 1511. “The additional servicing offer for Windows 10, version 1511 ends on April 10, 2018, and doesn’t extend beyond this date. To continue receiving security and quality updates, Microsoft recommends updating to the latest version of Windows 10,” the March documentation said.

The company has extended the lifespan of other software previously, including the original version of Windows 10, tagged as 1507. In February 2017, it added six weeks to the timetable. Generally, however, Microsoft has been hard-nosed about support deadlines, and for good reason.

“The danger is that customers won’t believe Microsoft will end support when they say [they will],” said Gartner analyst Michael Silver in a 2017 interview. “It would set a bad precedent if organizations think that they can rely on Microsoft to constantly extend [support].”

By hewing to the once-revised deadline for 1511, Microsoft had drawn a line in the sand, showing commercial customers that while it may bend to their demands, it will not break with critical policies, like these, which are foundation to its Windows-as-a-service concept.

Website Design – Hassman Research Institute

Hassman Research Institute

The Website Design team of South Jersey Techies has been constantly working on developing great looking websites using the latest web technologies. The most recent website developed by our team is for Hassman Research Institute in Berlin, NJ.

 

Hassman Research Institute

 

Have questions?

Our Web Design team is here to help, call us at: 856-745-9990 or visit: https://southjerseytechies.net

South Jersey Techies, LLC is a full Managed Web and IT Services Company located in Marlton, NJ providing IT ServicesManaged IT Services, Website Design ServicesServer SupportIT ConsultingVoIP PhonesCloud Solutions Provider and much more. Contact Us Today.

Microsoft: 200M Now Use Windows 10 In The Enterprise

The latest numbers from the company show businesses are close to schedule to move away from Windows 7 before the older OS retires in early 2020.

Windows10 Enterprise

Microsoft on Tuesday said that some 200 million enterprise workers now run Windows 10, a sign that corporations and other businesses are close to schedule to scrub Windows 7 from their machines before that older OS retires in about 20 months, an analyst argued.

“The 200 million resonates with me, based on what I’m hearing from clients,” said Stephen Kleynhans of Gartner Research. Migrations to Windows 10, he added, are progressing “pretty aggressively.”

Joe Belfiore, a corporate vice president who leads the Windows 10 team, revealed the number at Microsoft’s Build developers conference Tuesday. “Right now, there are over 200 million people in corporate accounts using Windows 10,” Belfiore said as he claimed deployment is “really ramping up” in the enterprise. “We’ve seen that [Windows 10] adoption rate increase now at 79% year-over-year growth.”

The day before, Microsoft contended that “nearly 700 million” devices are running Windows 10 worldwide. On that basis, enterprises accounted for less than 30% of all copies of Windows 10.

(Although the two numbers – Belfiore’s 200 million people using Windows 10 in corporate settings and Microsoft’s 700 million devices powered by the operating system – measured two different things, it’s not uncommon for Microsoft to obfuscate this way to prevent direct comparisons. In actuality, because Microsoft typically sells licenses on a per user basis, with multiple devices allowed for each user, 200 million people may be using more than that number of Windows 10 devices.)

While neither the percentage nor the 200 million are to be sneezed at, the former is significantly less than the average overall for commercial PCs, which have historically accounted for more than half – 55% has been an often-cited figure – of all personal computers.

And while Kleynhans did not dispute Microsoft’s claim of 200 people running Windows 10 in the enterprise, he sounded a bit disappointed in the number. “Is it a low number? It’s a little behind where I thought it would be,” Kleynhans said, noting that he expected it to be around 250 million by this point, perhaps even close to 300 million.

That 2009 operating system will fall off Microsoft’s support list on Jan. 14, 2020, meaning that while Windows 7 will continue to work as before, the Redmond, Wash. will stop distributing security updates to it.

It’s unrealistic to expect that all commercial customers will have purged Windows 7 by the retirement date, Kleynhans said, pointing out that he has recently spoken with clients who still run some instances of Windows XP (retired from support in 2014) and even Windows 98 (2006).

“What we [Gartner] expect is that enterprises will get to the 85%-90% level by the deadline,” Kleynhans said of the percentage of corporate devices shifted to Windows 7, “maybe even a little higher than that.” Nothing that’s happened has changed that estimate, he added.

“There are always laggards,” Kleynhans said.

According to other metrics, there may be a considerable number of them.

Estimates from analytics vendors, including U.S.-based Net Applications, which measure user and usage shares, signal that a large resorvoir of Windows 7 users will remain after the operating system’s retirement in 20 months. Net Applications’ latest data, for example, drove a Computerworld forecast that of the world’s Windows personal computers – all the PCs, not just those in the enterprise – 42% would still be running Windows 7 in January 2020, a much larger percentage than the 29% powered by Windows XP when that edition fell off the support list in April 2014.

In the end, large organizations will do what it takes to get off Windows 7 and onto Windows 10 by the former’s support cut-off date. The 200 million touted by Belfiore this week will be quite different a year from now, Kleynhans was certain.

“The speed with which I see Windows 10 moving now, it’s not going to be an issue,” he said.

Windows 10 deployment is, like previous iterations of the OS, on a timetable not of its own making. Instead, because of the vagarities of Microsoft’s historical release schedule and corporate acceptance (or rejection) of some editions, there is a clock ticking on Windows 10 because of the impending retirement of the current corporate standard, Windows 7.

Have questions?

Get answers from Microsofts Cloud Solutions Partner!
Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LL C is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

 

Remote Desktop Error – An Authentication error has occurred – CredSSP encryption oracle remediation – SOLUTION

CredSSP encryption oracle remediation

CredSSP encryption oracle remediation

Error


We recently had an issue with remote desktop connection to a Windows 2012 server from a Windows 10 Pro client computer that was recently updated.

An Authentication error has occurred.
The function requested is not supported.
Remote computer: <servername>
This could be due to CredSSP encryption oracle remediation

CredSSP updates for CVE-2018-0886

Solution


We had to create a registry key HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters; both the CredSSP and Parameters keys had to be created, and then create the AllowEncryptionOracle DWORD and give it a value of 2, worked for me on both Windows 7 and Windows 10 Pro computers. A reboot was not needed.
Registry path: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters
Value: AllowEncryptionOracle
Data type: DWORD

Have Questions?


Leave us a comment or visit: https://southjerseytechies.net/

South Jersey Techies, LLC is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

To read this article in its entirety click here.

DFSR – Windows Server Standard 2016 – The replicated folder has been offline for too long at Site – SOLUTION

We recently had an issue with and Active Directory DFSR – The replicated folder has been offline for too long at Site error for a Windows Server Standard 2016 single Domain Controller environment.

Event ID 4012 – DFSR – The DFS Replication service stopped replication on the folder with the following local path: C:\Windows\SYSVOL\domain. This server has been disconnected from other partners for 149 days, which is longer than the time allowed by the MaxOfflineTimeInDays parameter (###). DFS Replication considers the data in this folder to be stale, and this server will not replicate the folder until this error is corrected.

To resume replication of this folder, use the DFS Management snap-in to remove this server from the replication group, and then add it back to the group. This causes the server to perform an initial synchronization task, which replaces the stale data with fresh data from other members of the replication group. .

Summary


Consider the following scenario:

You want to force the non-authoritative synchronization of SYSVOL on a domain controller. In the File Replication Service (FRS), this was controlled through the D2 and D4 data values for the Burflags registry values, but these values do not exist for the Distributed File System Replication (DFSR) service. You cannot use the DFS Management snap-in (Dfsmgmt.msc) or the Dfsradmin.exe command-line tool to achieve this. Unlike custom DFSR replicated folders, SYSVOL is intentionally protected from any editing through its management interfaces to prevent accidents.

How to perform a non-authoritative synchronization of DFSR-replicated SYSVOL (like “D2” for FRS)

  1. In the ADSIEDIT.MSC tool modify the following distinguished name (DN) value and attribute on each of the domain controllers that you want to make non-authoritative:CN=SYSVOL Subscription,CN=Domain System Volume,CN=DFSR-LocalSettings,CN=<the server name>,OU=Domain Controllers,DC=<domain>

    msDFSR-Enabled=FALSE

     

  2. Force Active Directory replication throughout the domain.
  3. Run the following command from an elevated command prompt on the same servers that you set as non-authoritative:DFSRDIAG POLLAD

     

  4. You will see Event ID 4114 in the DFSR event log indicating SYSVOL is no longer being replicated.
  5. On the same DN from Step 1, set:msDFSR-Enabled=TRUE

     

  6. Force Active Directory replication throughout the domain.
  7. Run the following command from an elevated command prompt on the same servers that you set as non-authoritative:DFSRDIAG POLLAD

     

  8. You will see Event ID 4614 and 4604 in the DFSR event log indicating SYSVOL has been initialized. That domain controller has now done a “D2” of SYSVOL.

More Information


If setting the authoritative flag on one DC, you must non-authoritatively synchronizeall other DCs in the domain. Otherwise you will see conflicts on DCs, originating from any DCs where you did not set auth/non-auth and restarted the DFSR service.For example, if all logon scripts were accidentally deleted and a manual copy of them was placed back on the PDC Emulator role holder, making that server authoritative and all other servers non-authoritative would guarantee success and prevent conflicts.

If making any DC authoritative, the PDC Emulator as authoritative is preferable, since its SYSVOL contents are usually most up to date.

The use of the authoritative flag is only necessary if you need to force synchronization of all DCs. If only repairing one DC, simply make it non-authoritative and do not touch other servers.

This article is designed with a 2-DC environment in mind, for simplicity of description. If you had more than one affected DC, expand the steps to includeALL of those as well. It also assumes you have the ability to restore data that was deleted, overwritten, damaged, etc. previously if this is a disaster recovery scenario on all DCs in the domain.

Have any questions?

Call us at: 856-745-9990 or visit: https://southjerseytechies.net/

South Jersey Techies, LLC is a full Managed Web and Technology Services Company providing IT Services, Website Design ServicesServer SupportNetwork ConsultingInternet PhonesCloud Solutions Provider and much more. Contact for More Information.

To read this article in its entirety click here.

Website Design – Frank’s Express Car Wash

The Website Design team of South Jersey Techies has been constantly working on developing great looking websites using the latest web technologies. The most recent website developed by our team is for Frank’s Express Car Wash in Bensalem, PA; Maple Shade, NJ and Delran, NJ.

Have questions?

Our Web Design team is here to help, call us at: 856-745-9990 or visit: https://southjerseytechies.net

South Jersey Techies, LLC is a full Managed Web and IT Services Company located in Marlton, NJ providing IT ServicesManaged IT Services, Website Design ServicesServer SupportIT ConsultingVoIP PhonesCloud Solutions Provider and much more. Contact Us Today.

Website Design – Event Medical Staffing Solutions

The Website Design team of South Jersey Techies has been constantly working on developing great looking websites using the latest web technologies. The most recent website developed by our team is for Event Medical Staffing Solutions in Sharon Hill, PA.

Event Medical Staffing Solutions (EMSS) has a nationwide network of emergency medical professionals focusing on special events, sporting events, construction sites, medical escort services and the television and film industry.

Event Medical Staffing Solutions specialize in on-site medical needs for any duration at any location, and any type of event. They have teams on standby 24/7 to respond to your last minute needs.

 


Have questions?

Our Web Design team is here to help
Call us at: 856-745-9990 or visit: https://southjerseytechies.net

South Jersey Techies, LLC is a full Managed Web and IT Services Company located in Marlton, NJ providing IT ServicesManaged IT Services, Website Design ServicesServer SupportIT ConsultingVoIP PhonesCloud Solutions Provider and much more. Contact Us Today.

RingCentral Mobile Users Without A Digital Line

Ring Central allows your employees to communicate anywhere, anytime on any device. In the past, Ring Central has not been enforcing licenses for employees that are using the system on mobile devices without a digital line. That is about to change. 

 

RingCentral Mobile Users FAQ

 

Why are you now charging for Mobile Users without a digital line?
Mobile Users without a digital line can make and receive calls and have access to many of the same capabilities as users with digital lines. These include RingCentral Glip, RingCentral Meetings, integrations and more. With this advanced functionality, these users have begun using the product the same way they would a digital line.

Consequently, Mobile Users using the system without a digital line will now be considered part of the total licensed users and will be charged based on their account’s current cost per digital line.

Will I be charged for using the Mobile App?
No. Mobile Users with a digital line are not affected, and can continue to use the Mobile App for no additional charge. This change only affects Mobile Only Users without a digital line.

When does this take effect?
Please refer to the email notification for the timing of this change for your account.

What will be the cost?
The cost for each Mobile User without a digital line will be the same as users who have a digital line. If you want to add digital lines for your Mobile Users at no additional cost (excluding taxes and fees), please contact your RingCentral account manager.

What are the benefits to Mobile Users of adding a digital line?
By adding a digital line, the Mobile User will get full access to RingCentral’s softphone (inbound and outbound) and the ability to use a desk phone if needed. If you are interested, please contact your account manager by calling  800-591-7973.

How do I know which Mobile Users without a digital line will be billed at any given time?
System administrators can log into their RingCentral account and see this information under the billing tab. See more details here. If a mobile user without a digital line is inactive or is only used for internal company calls, within a given month, there will be no charge.