RunAs Radio

While on the .NET Rocks Visual Studio 2012 Launch Road Trip, Richard sat down with Robert Bogue to talk about ten of the most common mistakes made with Sharepoint. The conversation covers the gambit of Sharepoint infrastructure challenges including SQL Server, disk storage as a whole, networking, monitoring and more!

Richard chats with Rob Gillen about the myths and realities around WiFi security. Rob talks about how the release of passwords in the wild has weakened WPA2-PSK. You need to use an original SSID and long passwords to have a chance to keep your WiFi secure. The conversation also digs into the challenges of open WiFi access as places like coffee shops. Rob also talks about how WiFi Protected Setup has exploits like reaver-wps that can break into a home WiFi network in a matter of hours. He also debunks non-secure security features like hidden SSIDs and MAC address filtering. Finally, Rob rolls out the big guns to talk about WiFi Pineapple, a tool capable of exploiting the preferred wireless network features of smartphones to get them to connect to a man-in-the-middle attack system. Frightening and enlightening!

Richard chats with Mario Hewardt about what IT folks need to know about debugging Windows. Yes, that's right - IT folks should be able to debug Windows. Not the same way that programmers do, but rather focused on how Windows actually works so that they can solve program interaction problems. Mario talks through a scenario he ran into involving an occasionally crashing program and how he used the Debugging Tools for Windows tool kit from the Windows SDK and SysInternals Process Monitor to solve the problem.

Richard chats with former PFE Joe Sack about his work helping queries go faster in SQL Server. Joe talks about his techniques for figuring out what to fix as well as how to fix it, starting with studying wait statistics in dynamic management views - SQL Server knows what it's waiting for! From there the conversation digs into the ways that SQL Server fools itself to perform badly, including cardinality estimate issues and other problems with statistics. Joe also looks at the potential of column store indexes in SQL 2012 - still new cool stuff to come in SQL Server!

Mark Russinovich returns to the show to talk about his new book Trojan Horse and discuss the world of cyberwarfare and malware in general. After scaring the heck out of us with the potential exploitation of computing out there today, the conversation turns to solutions. Mark points out how the white listing approach of iOS and the Apple App Store has been so effective in keeping malware off iOS devices that it is being emulated everywhere, including Microsoft. Richard also pokes at Mark's role around Azure and the cloud - is that where the next generation of exploits will come?

Richard chats with Glenn Berry about SQL Server hardware. Microsoft changed the licensing of SQL Server in 2012 to per-core rather than per-socket, suddenly making SQL Server much more expensive if you've gone to lots of cores. Glenn talks about how to assess your workload to know if you need as many cores as you currently have, why you shouldn't upgrade in place and use old hardware for SQL Server 2012 and the differences between Intel and AMD CPUs in this new world. Lots of geeky hardware speak, but if you do it right, you can make your SQL hardware almost free! Glenn mentions a couple of important web sites related to SQL performance in relation to hardware, including the TPC-E stats and Geekbench to understand how your hardware performs.

Richard talks to Michael Steineke about the new clustering features of Windows 2012. Michael starts with the latest version of Network Load Balancing for clustering and goes from there - looking at how all the major products Microsoft makes, like SQL Server and Exchange, work with clustering. The conversation focuses in on the importance of the new file share clustering capabilities, combined with SMB3 to create awesome high performance shared storage with commodity equipment. Server 2012 changes everything!

Richard chats with Microsoft's Stephen Rose about Windows 8 in the enterprise. Does it make sense? Stephen talks about the specific features available in the enterprise edition of Windows 8. It's not just about tablets!

Richard chats with Microsoft Premier Field Engineer Kamal Abburi about his experiences putting together hybrid implementations of Exchange and Office 365. The conversation starts out focusing on why Exchange in the Cloud at all, and the challenges of making a full migration to Office 365. Kamal mentions some of the regulatory hurdles that some countries put in place requiring some mailboxes to remain in the country of origin. He then digs into the challenge of hybrid implementations, covering the role of ADFS in creating a single sign-on experience, challenges with security and how to do seamless migrations of mailboxes. In the end it appears that hybrid deployment is going to be the most common model used, especially going forward into the next version of Exchange! Check out Office 365 and the Office 365 Deployment Guide.

Richard talks to Victor Mushkatin from the System Center team at Microsoft about Operations Manager 2012. Victor is the former CTO of AVICode, which was acquired by Microsoft in 2010. AVICode's technology has been added to OpsMan to provide detailed instrumentation of .NET applications. The conversation explores how OpsMan 2012 can instrument web and client-based applications end to end to detect reliability and performance issues. Victor also digs into how OpsMan 2012 is a key part of Microsoft's DevOps tool chain strategy.

Richard chats with Justin Morris about the recently announced Lync 2013 Preview. The preview is available for download now, but the product itself is still several months away. Justin talks about how quickly Lync has evolved as an enterprise SIP phone technology into the concepts of presence, integrating email, instant messaging, voice/video calling and desktop sharing together.

Richard chats with Jeffrey Snover about DevOps at Microsoft. The concept of DevOps goes back to a talk that John Allspaw and Paul Hammond did at Velocity called 10 Deploys Per Day. DevOps focuses on having developers and operations working closely together to make rapid deployments possible. Jeff discusses his blog post on the subject of Windows Server 2012, PowerShell 3.0 and DevOps. DevOps is coming to the Microsoft world, are you ready?

Richard talks with Bhargav Shukla about some of the issues he encounters with Exchange 2010 out in the field. The conversation starts out with a long discussion about the impact of mobile device, especially the tendancy today to bring your own device to work. Most users have several devices now syncing with Exchange, not just one or two. This leads to a great knowledge base article on issues with Exchange Active Sync and third party devices. Bhargav then moves onto issues around mailbox size, the impact of active directory performance and load balancing. So many challenges, but only so much time - this show is chocked full of ideas on how to make Exchange perform better!

Richard chats with Jeff Stokes about Microsoft's Windows Assessment Toolkit. Download the ADK here. Another amazing free tool from Microsoft, the Assessment Toolkit gives detailed evaluations on performance, reliability, compatibility and functionality across multiple operating systems, software, low level and application level behavior. Jeff talks about testing new hardware with existing software, with new versions of software, any combination you like. Also mentioned is Performance Analysis of Logs (PAL), which should be in your toolkit also. The Windows Assessment Toolkit is a tool you need to have sitting right beside Microsoft Deployment Toolkit - test every change, every time!

Richard talks to Steve Goodman about mobile mail solutions. Steve starts out talking about getting iPhone to work well with Exchange. Turns out that much of what makes iPhone work well applies to other smart phone devices like Android as well. The conversation also explores the role of the cloud, tablets and where the market is headed. Who knew so much innovation is still coming around email?

Mark Minasi is back! Mark and Richard get into a debate about the role of ARM-based and Intel-based tablets. Mark references a couple of articles he authored. The first discusses how ARM tablets cannot join domains. The second digs into the idea domain joining isn't that big a deal. From there, the conversation turns to the hardware differences, how Intel is making moves to be more competitive with ARM from a power and performance perspective, perhaps eliminating the need for ARM in the enterprise at all. Expect lots of history lessons along the way, these guys are getting old!

Richard chats with Steve Murawski about how Server 2012 affects file sharing. Server 2012 includes SMB3, which allows NIC teaming to allow commodity 1GB NICs to work together to create awesome file transfer rates. But how far can we go with that? Steve talks about how clustering and other services in Server 2012 create a world where you may never need a SAN at all - everything can be a file share!

Richard chats with Rhonda Layfield about the now shipping version of Microsoft Deployment Toolkit 2012. Rhonda describes the relationship between MDT 2012 and System Center 2012 Configuration Manager - what MDT does and what SCCM does. The conversation continues over to how Group Policy packs are deployed by default in MDT 2012, which might surprise some IT folks. Rhonda also talks about Security Compliance Manager and how it can help you understand where your Group Policy is at, as well as provide policy configuration for specific Windows, Office and Internet Explorer features. You can get MDT and SCM at the Solution Accelerators page on TechNet. Also, check out the Microsoft Security Compliance Manager library page on TechNet for a list of the security baseline settings for various operating systems, Internet Explorer, Exchange and Office.

Richard talks to Robert Bogue about his Nine Keys to SharePoint Success. The conversation starts off with an acknowledgement that a SharePoint implementation, like any business-related project, needs a shared vision that creates value for a business for there to be any chance of success. After all, if you don't define success, how can you know when you've achieved it? From there, Robert discusses the impact of culture change on SharePoint implementations, honestly evaluating how the project is going, the relationship that IT has with the business and how platitudes can keep us from digging deep into problems. Finally, there are some simple things, like the right defaults, that can help make a SharePoint solution successful.

Richard and Mark Minasi go off the RunAs Rails a bit to talk about geek health. At the beginning of 2011 Mark embarked on a diet and exercise regime that a year later reduced his weight by 30%. The conversation is geeky, but that's what we like - Mark has learned how to get his body recalibrated to burn fat rather than carbs, take the weight off and keep it off. Here's the list of links talked about in the show: Nutrition Made Clear, Tap and Track, MyFitnessPal, FitBit, Withings, Zeo and Polar.

Richard chats with Eric Shupps about the process of improving SharePoint performance. Starting with the single-server implementation of SharePoint, Eric walks through each point of tuning SharePoint including database tuning, separating web front ends from application servers, separating off services, etc. Microsoft has a great site on Best Practices for SharePoint Server 2010.

Richard chats with Steve Murawski about the new features in Powershell V3. V3 comes with Server 2012, but should also make an appearance in 2008 R2 and Windows 7. Steve talks about how V3 is utilizing .NET 4 and the DLR for improved performance and flexibility. The new Command Source Adapter uses CDXML to create Powershell proxy commands against WMI API calls, which has made it possible for Server 2012 to ship with 1200 cmdlets, up from the 400 in 2008 R2. Steve also talks about workflows in V3, coming from the .NET 4 workflow foundation engine to create long running powershell tasks that survive the shutdown of the powershell enginer, even reboots. Microsoft seems to get it right on version threes - and Powershell V3 is no exception.

Richard chats with Microsoft Premier Field Engineer Jeff Stokes about his tools and techniques for improving boot performance. Jeff points out that it doesn't matter what version of Windows you're using, all of them can suffer from bad boot performance for a variety of reasons, including third party tools, logon scripts and even group policy. The first tool on the list for diagnosing boot performance problems is xperf, specifically xbootmgr which is part of xperf. You can get xperf at the Windows Performance Analysis Development Center. xperf is great for all sorts of performance analysis beyond boot performance, and Jeff also points out the codeplex project xperf123 for making using xperf a whole bunch easier. Jeff also points to Troubleshooting Group Policy Using Event Logs, using Netsh Commands for Network Trace, Richard chats with Microsoft Premier Field Engineer Jeff Stokes about his tools and techniques for improving boot performance. Jeff points out that it doesn't matter what version of Windows you're using, all of them can suffer from bad boot performance for a variety of reasons, including third party tools, logon scripts and even group policy. The first tool on the list for diagnosing boot performance problems is xperf, specifically xbootmgr which is part of xperf. You can get xperf at the Windows Performance Analysis Development Center. xperf is great for all sorts of performance analysis beyond boot performance, and Jeff also points out the codeplex project xperf123 for making using xperf a whole bunch easier. Jeff also points to Troubleshooting Group Policy Using Event Logs, using Netsh Commands for Network Trace, Microsoft Network Monitor 3.4, Microsoft Exchange Server Error Code Look-up (which is good for all sorts of error codes, not just Exchange) and of course, Windows Sysinternals as all tools to help you diagnose your boot performance. Jeff mentions Justin Halls' article on Tools for Troubleshooting slow boots and slow logons. And don't forget to check out Jeff's blog Dude where's my PFE? and Yong Rhee's blog The troubleshooters and problem solvers for even more information!

Richard talks to Richard Hicks about the new features of DirectAccess in Windows Server 2012. DirectAccess first made its appearance in Server 2008 R2 as a way to make VPN connectivity to the network less painful for users. But the server requirements were arduous, to the point that many IT folks could not deploy DirectAccess at all. Richard talks about how this second version of DirectAccess solves many of those problems. Windows Server 2012 isn't here quite yet, but when it is, you're going to want DirectAccess!

Richard talks to Alan Sugano about using the cloud for disaster recovery. Alan discusses how the latest version of Site Recovery Manager (SRM) from VMWare works with certain cloud providers to provide an alternate site for your virtual machines in the event of a disaster. The conversation digs into how much bandwidth is needed, dealing with the initial 'big sync' of data and the on-going costs of operating the cloud as a remote site.

Richard talks to Aidan Finn about the new Hyper-V features in Windows Server 8. Aidan starts off talking about Hyper-V Replica, focusing on it as an awesome solution for virtual machine disaster recovery for small and medium businesses. The conversation continues into exploring how Microsoft has taken their experiences running Azure into improving Hyper-V and Server 8.

Richard chats with Jes Borland about SQL Server Reporting Services (SSRS). Jes talks about how SSRS has evolved into the latest version with SQL Server 2012, including some new features like reporting monitoring, where reports are generated automatically (and notifications sent out) when data changes. The conversation also digs into some of the administrative capabilities of SSRS including security and multi-tenancy features.

Richard chats with Allan Hirt about the new failover clustering features in SQL Server 2012. SQL Server 2012 has added a number of new features to make clustering more flexible and less wasteful of hardware. Allan talks about how Windows Server 8 will also amp-up the clustering offerings when it ships. The conversation also digs into the controversy around Microsoft deprecating database mirroring in SQL 2012 - it's not the end of the world, the technology won't explode when you upgrade!

Richard talks to Rory McCaw of Infront Consulting about the System Center 2012 suite. The conversation starts with the starting point of System Center - Configuration Manager or Operations Manager, depending on the focus of your organization. From there, the entire suite is explored, including Virtual Machine Manager, Orchestrator, Service Manager, Data Protection Manager, Endpoint Protection and App Controller. Rory explains how the different parts of System Center fit together and why you want to slowly add each product to your organization. This is about getting to preventative IT rather than constantly battling the crises!

Richard talks to Stacia Misner about the new features of Data Analytics 2012. The conversation starts with the evolution of data analytics from 2000 to 2005, 2008, 2008 R2 and now 2012. Then Stacia digs into how Excel has become the defacto client for analysis services, using PowerPivot and PowerPivot for Sharepoint mode. PowerPivot runs from Excel and doesn't require Analysis Services, at least not at first - but eventually you'll want to bring in the back end. Stacia also explains the evolution of the Unified Dimensional Model (UDM) into the Business Intelligence Seminatic Model (BISM) in Analysis Services 2012. Lots of incentive to upgrade to 2012!

Richard talks to Brent Ozar about the upcoming release of SQL Server 2012. While there's certainly lots to talk about around SQL Server 2012, Brent focuses on some of the odder features, like the ability to attach SQL Server to a database accessed over a NAS. Doesn't seem like the best idea, but Brent paints a few scenarios. The conversation also brushes over the NoSQL movement and how SQL Server still plays a role - Brent brings up the SQL Server Connector for Hadoop. Brent also talks about the SQL Server Certified Masters program, how it has evolved from a three week onsite class at Microsoft into a study-at-home, huge exam and six hour lab solution that has made it easier for more people to get certified.

Richard talks to Tony Redmond about DMARC, a new email specification for controlling spam and phishing emails. DMARC is an acronym for Domain-based Message Authentication, Reporting and Conformance. It standardizes implementations of Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) so that email servers receiving mail can be sure that the domains the email identifies with are actually the sources of the email. Tony also digs into the deeper concepts of DMARC, including receiving servers being able to communicate back with source servers to indicate when email is being marked as spam. The conversation digs into the larger concepts of spam solutions, talking about how cloud is helping to create safer environments for email and how email will ultimately need to evolve to stay relevant in business environments.

Richard talks to Mike Jones about implementing IPv6 at home. After listening to RunAs Episode 205 about IPv6, Mike set about to get himself ready for World IPv6 day. Mike talks about discovering what his ISP (Comcast) was doing for IPv6, and how you can implement IPv6 in your network with or without ISP support. He almost mentions two key resources - one is knowledge base article 929852 on configuring IPv6 features in Windows. The other is the IPv6 test site so you can evaluate how your set up is working. Mike also blogs about his experiences with IPv6. June 6 2012 is World IPv6 Launch Day - are you ready?

Richard talks to Stephen Rose about the Windows 8 Consumer Preview. Stephen talks about the features that IT Pros are particularily going to be interested in for Windows 8, such as the new version of BitLocker. The conversation also moves over to Server 8 and some of the capabilities there, including a new IPv4 version of DirectAccess. Now is a great time to get testing!

Richard talks to Justin Morris about the mobility component of Lync. Only just released, Microsoft has Lync clients for iPhone, Android, Symbian and Windows Phone 7. Justin talks about how the mobile Lync client extends Lync's concept of presence to the smartphone, so that people working in the enterprise can connect and communicate with their fellow employees on the road the same way. The conversation digs into the challenges of data connectivity versus cell telephony, and how Lync provides a call-via-work mechanism to centralize and control cellular call costs. And don't worry - Skype comes up in the conversation too!

Richard talks to Sean Deuby about Simple Cloud Identity Management (SCIM). SCIM is an evolving standard for simplifying federation of identity authentication and account information using common web-based protocols like REST and SAML. Sean talks about how services like Microsoft's Active Directory Federation Services (ADFS) works fine for a handful of major cloud applications, but becomes a problem when the number of applications grows. SCIM looks to address this by simplifying the provisioning of identity services. You can read more about SCIM at http://www.simplecloud.info/ and Sean's article on SCIM at Windows IT Pro. Sean also mentions Ping Identity as a key driver behind SCIM and recommends watching a one hour webinar entitled SCIM: New Standard on the Block. It's early days for SCIM yet, but it's worth getting up to speed and asking your cloud vendors where their support for the standard is.

Richard talks to Tom Arbuthnot about how Microsoft Lync impacts business processes. Going beyond 'What is Lync', Tom talks about how the integration of IM, email and voice together presents opportunities for automating workflow. Tom sites the example of a timesheet that follows you around until you fill it in. He also discusses the goal of reducing email by creating opportunities for immediate response using the presence that Lync creates. Ultimately the goal is to see how Lync improves your business beyond just saving money on web seminars. Check out Tom's Lync'd Up Blog for more Lync goodness.

Richard talks to Stephen Foskett about building data centers for virtual servers. The conversation ranges over how virtualization has evolved from consolidating servers in data centers into the newer concepts of private cloud, where being able to move and/or duplicate a virtual machine quickly becomes paramount. Stephen focuses on the challenges around data in these scenarios and how traditional disaster recovery techniques for data migration are inadequate. In 2012 Stephen will be doing a series of seminars on building virtual infrastructure - check them out for more information!

Richard talks to Clint Huffman about understanding the health of IIS7. Clint points out some awesome resources for taking care of IIS7, especially learn.iis.net. Don't miss Clint's Blog Post on IIS7 PowerShell Scripts, how to TroubleShoot Failed Requests Using Tracing in IIS7 and where to get the IIS Log Analyzer. There's more to talk about here, but this is a great start on the toolkit for keeping IIS7 healthy!

Richard talks to Jeremiah Peshcka about how DBAs can work with Object Relational Mapping (ORM). ORMs are tools used by developers to speed development of object-oriented applications that use databases by automating the process of connecting application objects to database objects. While speed is good, crap is bad, and DBAs often struggle with the results of the ORMs generated data structures and queries. Jeremiah talks about how DBAs can work with developers to make better databases and queries, what tools can help out and how everyone can benefit from ORMs. Check out Jeremiah's awesome blog post on DBAs and ORMs.

Richard talks to Rodney Buike about how System Center 2012 facilitates the construction of private clouds. This is where System Center all comes together - utilizing Configuration Manager, Operations Manager, Virtual Machine Manager, Service Manager and Orchestrator to create effective private cloud infrastructure in your own data center. Rodney talks about how each of the System Center components work together to simplify the deployment of services - beyond the individual VM and into a suite of VM, networking rules, storage, etc. Each of the System Center products bring something to the table in this scenario. You should already be using them for their core purposes, now take it to the next level!

For the first show of 2012, Richard talks to Dana Epp about his eight rules of security. Dana wrote the original blog post back in December of 2003, you can read it here. The rules are technology agnostic, and revisiting them reminds us that they are still right, there's just new ways of implementing them. Have a read and think again about what you're focused on for your security!

Richard talks to Mark Minasi about the events of 2011 that happened and didn't happen. The conversation starts with Windows 8 and the Build conference - is it going to succeed? The debate drills into the role of the tablet in the enterprise. Next topic is IPv6. 2011 is the year that IANA ran out of IPv4 addresses, but the world didn't end. When will IPv6 ascend? Finally, Mark and Richard chat about the Kinect and the next generation of user interfaces. What a great year - and 2012 looks awesome. Happy New Year!

Richard talks to Todd Lamothe about how to use Windows Server 2008 to secure WiFi. No, this doesn't replace encryption, it just adds to it - with WPA2-RADIUS to have your access point communicate with the Network Policy Service in Windows 2008. Now every user on your WiFi connection is specifically associated with an active directory account. Todd talks through the challenges of certificates, configuration and how to integrate the service with a firewall to get a complete end-to-end view of what your users are doing on the wireless network.

Richard talks to Mitch Garvis about System Center Essentials (SCE). SCE brings the power of System Center Configuration Manager, Operations Manager and Virtual Machine Manager to the small-to-medium business. It limits to 50 servers (physical and virtual) and 500 workstations - plenty for lots of businesses! Mitch digs into a few tricks of the trade for being successful with SCE - check out his blog post on installing System Center Essentials. SCE is the tool you wish you knew about, now have a listen and you will!

Richard talks to Tony Redmond, formerly of Hewlett-Packard, about the state of affairs for Office 365. At the time of the interview Office 365 had been shipping for only five months. Tony talks about the outages suffered by Microsoft and Google for their cloud offerings, noting that Microsoft is still in the early days of learning how to run a massive multi-tenancy infrastructure. He also compares Gmail and Outlook/Exchange, as well as recognizing that Outlook and Exchange are not the same product from the same team - that they have different goals and don't always get along. The discussion wraps up with where we can expect Exchange to go in the future, and how important hybrid cloud implementations are and will be.

Richard talks to Steve Syfuhs at TechDays Toronto about IT Pros providing security services for developers using Active Directory Federated Services. IT and development talking to each other willingly? Perish the thought! But in truth, Steve makes it clear that ADFS provides a great wrapper for developers to access active directory or any other service that has security claims that an application might require. Azure depends on it, even Office 365 can take advantage of ADFS. Steve discusses how IT can work with developers to make the jobs of both groups easier.

While at TechDays in Toronto, Richard talks to Rodney Buike about virtualizing desktops. Rodney digs into how Citrix's XenDesktop can let you use Windows 7 applications on your iPad! The conversation also explores the use of application virtualization to minimize storage use and simplify software updates, as well as an approach to using desktop virtualization to keep older workstations up and running for longer. VDI is coming of age, and Rodney digs into how to get things done.

Richard talks to Rick Claus just before lunch on the second day of TechDays Toronto about diagnosing problems with DNS. Rick admits that much of his session was derived from Mark Minasi's session on DNS - but Rick adds his own twist. The conversation dives into the tools you can use to understand what's happening with DNS on your machine and the common problems that crop up with DNS. It's a tour back to the fundamentals of networking!

Richard flies solo at TechDays Toronto talking to Tom Moreau about some of the new T-SQL features in the next version of SQL Server, code named Denali. Tom waxed poetic about sequences and their advantages (and disadvantages) compared to identity columns. Other features Tom digs into include Lead and Lag and the new Throw feature that further extends the Try Catch capabilities in T-SQL.