2007

1. 2007 • Internet Explorer 7 • Office 2007 • Windows Vista • Exchange 2007 • Exchange Archiving

2. Office 2007 • No New Core Policy • contention for file associations • too wide a choice of applications • Base Policies • one for XP and one for Vista • number 0 policies • along the lines of the current security policy • minimum set of essential functions only • separate Office and Windows policies

3. Base Policies – Essential Functions • Adobe Flash Player • Adobe Reader • Macromedia Shockwave Player • McAfee VirusScan Enterprise • Metaframe Presentation Server Client • Microsoft Firewall Client • Quota Advisor Snapin • Shadow Copy Client • Patching from WSUS • Branding

4. Base Policies – Other Features • Extend Policy Checker • to check for invalid combinations of policies • stop dead with a message? • or show a message and allow use? • or maybe just phone home? • Provide separate policies for other components • Campus Security Policy to 90 • Core policies were "one size fits all" • Base policies allow "pick and mix"

5. Office 2007 - Deployment • Licensed for Enterprise Version • Package the lot into a single 4 policy • Deploy against one of the base policies • Rebuild machines from fresh OU's • Compatibility Pack for Office 2007 • being deployed to Office 2003 core policy • Office XP core policy to 91

6. Office 2007 - Configuration • Outlook • Autoarchive off • Archive location default to H: • Text only • Autoconfiguration to Exchange server • Open attachments read-only • Cached mode off by default • Elsewhere • Add the PDF and XPS writer addins • check interactions with Adobe software • Fast saves off all round • Turn on "always create a backup copy“ • Autorecover files to H:\