But what if I don't have the resources to test?

re: But what if I don't have the resources to test?

Karina — Thu, 24 Aug 2006 00:47:39 GMT

Alter schutzt vor Torheit nicht.

re: But what if I don't have the resources to test?

bradley — Thu, 10 Nov 2005 19:19:00 GMT

My only issue with Susan's point here is that this type of argument could be extrapolated to other third party software, specifically with regard to patching.

Yes I know Microsoft as the vendor of the operating system should get some level of special consideration in terms of following best practices, etc. In fact, I follow their best practices in almost every case, and I would advocate for doing so. The issue comes, though, when you say that patch testing only applies for "normal" configurations.

That is the same argument some vendors of third party applications use to say they won't support certain updates. I think Susan lists many of them on the threatcode.com site and says not to let your vendors dictate your security policies. If folks are following guidance to make their installations more secure, then I think there is something to be said for Microsoft testing those more secure environments.

Creating Test labs

bradley — Wed, 09 Nov 2005 20:32:00 GMT

You can also use the Microsoft tools VSMT to take virtualize copies of your production servers for testing. Some details are here: http://blogs.virtualserver.tv/blogs/dugie/archive/2005/11/09/VirtualTrance.aspx

But I can't test! My boss won't let me

TrackBack — Wed, 09 Nov 2005 19:24:00 GMT

Yesterday (http://blogs.technet.com/steriley/archive/2005/11/08/414002.aspx) I mentioned that there's...